EIP-2026-117402

This is a technical writeup describing an unquoted service path vulnerability in Lavasoft 2.3.4.7. The service 'LavasoftTcpService' is installed with an unquoted path, which could allow local privilege escalation if an attacker can place a malicious executable in a higher-level directory.