EIP-2026-117832

This is a writeup describing an unquoted service path vulnerability in Rapid7 Nexpose Installer versions <=6.6.39, which could allow local privilege escalation due to improper handling of paths with whitespace. The advisory includes details of the vulnerability and service configuration but does not contain executable exploit code.