EIP-2026-117830

The writeup describes an unquoted search path vulnerability in Rapid7 AppSpider 6.12, affecting Windows services, which could allow local privilege escalation if an attacker can place executable code in the system root path.