EIP-2026-117831

This is a technical writeup detailing an unquoted service path vulnerability in Rapid7 Nexpose. It provides steps to identify the vulnerability and explains the potential for local privilege escalation if an attacker can place malicious executables in the system root path.