EIP-2026-116818

This is a writeup detailing an unquoted service path vulnerability in ASUS AAHM 1.00.22. The vulnerability allows local privilege escalation if an attacker can place an executable in a path that is executed due to the unquoted service path.