Escalation - Nssm-2.24 Privilege

When MyLegacyApp runs, worker.bat executes as SYSTEM. The attacker now has a new admin user.

Even if the target binary is safe, another vector exists: or binary path injection via the NSSM configuration stored in the registry. nssm-2.24 privilege escalation

NSSM stores its configuration in the Windows Registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\[ServiceName]\Parameters . When MyLegacyApp runs, worker

CVE lists do not directly tag NSSM 2.24 with a specific number for a singular flaw, but the security community has identified a in how NSSM installs services. When MyLegacyApp runs