EIP-2026-117372

This PowerShell script exploits a privilege escalation vulnerability in Kaseya VSA agent <= 9.5 by monitoring the default working directory for script files and appending malicious code to them before execution, leveraging excessive permissions granted to low-privileged users.