Find the XSS on the /support site, then get code execution via the relaunch api.invoke IPC function.
The whole writeup is [here](https://letzpwn.com/writeup/2022/10/29/babyelectron.html).