A high-severity vulnerability has been discovered in Realtek’s Bluetooth HCI Adaptor that allows local attackers to delete arbitrary files and potentially escalate privileges on affected systems. The vulnerability, tracked as CVE-2024-11857, was published to the GitHub Advisory Database and represents a significant security risk for systems utilizing Realtek Bluetooth hardware components. The flaw stems from a Link Following weakness classified under CWE-59 in the Common Weakness Enumeration database. This flaw enables local attackers with regular user privileges to exploit the Bluetooth HCI Adaptor’s file handling mechanisms through symbolic link manipulation. The attack vector requires minimal complexity and no user interaction, making it particularly concerning for security professionals.