EIP-2026-117899

The exploit demonstrates a local privilege escalation (LPE) vulnerability in ScanGuard Antivirus 2020 due to insecure folder permissions. It replaces the legitimate executable with a malicious one, leveraging weak access controls (Full Control for Everyone group) to achieve code execution with elevated privileges.