Kite Unquoted Service Path Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Kite application version 4.2.0.1 U1. The issue arises from an unquoted service path in the KiteService Windows service. This vulnerability allows local attackers to exploit the service binary path by placing a malicious executable in the Program Files directory. When the service starts, the malicious executable can be executed with LocalSystem privileges.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, with the malicious executable being executed under the LocalSystem account, which has extensive rights on the system.

Reproduction

The vulnerability can be reproduced by placing a malicious executable in the Program Files directory. Once the executable is in place, starting the KiteService will trigger the execution of the malicious payload with LocalSystem privileges.