EIP-2026-117724

This is a writeup describing an unquoted service path vulnerability in OpenVPN Private Tunnel v2.8.4. The vulnerability could allow local privilege escalation if an attacker can place executable code in a path that is executed due to improper quoting.