EIP-2026-117231

This is a writeup describing an unquoted service path vulnerability in Genexus Protection Server 9.6.4.2. The service path contains spaces and is not enclosed in quotes, potentially allowing local privilege escalation if an attacker can place a malicious executable in the path.