In plugins/HookSystem.cpp in Hyprland up to and including 0.39.1 (prior to 28c8561), through a race condition, a local attacker can cause execution of arbitrary assembly code by writing to a predictable temporary file.
Vulmon