EIP-2026-116965

This is a writeup describing an unquoted service path vulnerability in Cloudflare WARP 1.4.107. The vulnerability could allow local privilege escalation if an attacker can place an executable in a path that is parsed before the intended binary.