MiniTool ShadowMaker Unquoted Service Path Vulnerability in MTAgentService Allowing Privilege Escalation

A vulnerability exists in MiniTool ShadowMaker version 3.2 within the MTAgentService, where an unquoted service path can be exploited by local attackers to execute arbitrary code. The flaw allows for the injection of malicious executables into the unquoted path of the AgentService executable, potentially leading to elevated privileges.

Impact

Exploitation of this vulnerability could allow local attackers to execute arbitrary code with elevated privileges.

Reproduction

The vulnerability can be reproduced by exploiting the unquoted service path of the MTAgentService. This can be done by injecting a malicious executable into the unquoted path of 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe'. Once the executable is injected, it can be executed to gain elevated privileges.