EIP-2026-116772

The vulnerability involves improper file permissions on the Aloaha Credential Provider Service executable, allowing any user to replace it with a malicious binary. Upon reboot, the service runs with SYSTEM privileges, leading to local privilege escalation.