EIP-2026-118044

The vulnerability involves improper file permissions on Steam.exe and related binaries, allowing any user in the 'Users' group to replace the executable with a malicious binary. This can lead to local privilege escalation when the binary is executed at startup.