diff --git a/.changes/cli-signtool-path.md b/.changes/cli-signtool-path.md
new file mode 100644
index 000000000..03784a56b
--- /dev/null
+++ b/.changes/cli-signtool-path.md
@@ -0,0 +1,5 @@
+---
+"tauri-bundler": patch:feat
+---
+
+`TAURI_SIGNTOOL_PATH` environment variable for specifying the path to signtool.exe.
diff --git a/tooling/bundler/src/bundle/windows/sign.rs b/tooling/bundler/src/bundle/windows/sign.rs
index 192e056e2..a0e20860d 100644
--- a/tooling/bundler/src/bundle/windows/sign.rs
+++ b/tooling/bundler/src/bundle/windows/sign.rs
@@ -59,6 +59,10 @@ fn signtool() -> Option<PathBuf> {
   static SIGN_TOOL: OnceLock<crate::Result<PathBuf>> = OnceLock::new();
   SIGN_TOOL
     .get_or_init(|| {
+      if let Some(signtool) = std::env::var_os("TAURI_SIGNTOOL_PATH") {
+        return Ok(PathBuf::from(signtool));
+      }
+
       const INSTALLED_ROOTS_REGKEY_PATH: &str = r"SOFTWARE\Microsoft\Windows Kits\Installed Roots";
       const KITS_ROOT_REGVALUE_NAME: &str = r"KitsRoot10";