EIP-2026-117254

This exploit describes a privilege escalation vulnerability in Graylog Collector due to an unquoted service path. A local attacker can place a malicious executable in a directory that will be executed with elevated privileges when the service restarts.