EIP-2026-117310

This is a writeup detailing an unquoted service path vulnerability in iDeskService 3.0.2.1. The vulnerability allows for potential privilege escalation if an attacker can place an executable in a path that is parsed before the intended executable due to spaces in the path.