Outline Unquoted Service Path Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in Outline version 1.6.0 due to an unquoted service path in the OutlineService executable. This flaw allows local attackers to execute arbitrary code with elevated privileges, as the injected code would run with LocalSystem rights.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with high-level system privileges, potentially allowing for significant changes to the system or access to sensitive information.

Reproduction

The vulnerability can be reproduced by using the Windows Management Instrumentation Command-line (WMIC) to identify services with unquoted paths. The 'OutlineService' can be queried to reveal its binary path, which is unquoted and could be exploited to execute arbitrary code with elevated privileges.