EIP-2026-117169

This is a technical writeup describing an unquoted service path privilege escalation vulnerability in the Fitbit Connect service. The vulnerability allows a local attacker to execute arbitrary code with elevated privileges by inserting a malicious executable in the service path.