EIP-2026-118136

This is a writeup describing an unquoted service path vulnerability in Winstep Xtreme Service 18.06.0096. The output shows a service configuration query revealing the binary path, which could be exploited for local privilege escalation if an executable is planted in a path with spaces.