EIP-2026-116911

This is a writeup describing an unquoted service path privilege escalation vulnerability in BlueStacks Log Rotator Service (BstHdLogRotatorSvc) version <= 2.5.55. The vulnerability allows a local attacker to execute arbitrary code with SYSTEM privileges by placing a malicious executable in the service path.