EIP-2026-117897

This is a writeup detailing the discovery of an unquoted service path vulnerability in SAPSprint 7.60. The vulnerability allows for potential privilege escalation due to the service path containing spaces and lacking quotes, which could be exploited by placing a malicious executable in the path.