An unquoted service path vulnerability in Epic Games Easy Anti-Cheat 4.0 allows local users to escalate privileges to LocalSystem, posing a critical risk to system integrity.

The application utilizes an unquoted service path for the EasyAntiCheat service, which allows a local non-privileged user to place a malicious executable in the system root path. This executable is subsequently triggered by the service upon startup, executing with elevated LocalSystem privileges.

Successful exploitation grants an attacker full administrative control over the affected Windows host. Given the CVSS score of 8.4, this vulnerability represents a high-severity risk that could lead to complete system compromise, unauthorized data access, and the potential deployment of persistent malware or ransomware within the environment.

Immediate Action: Update the Easy Anti-Cheat service to the latest version provided by the vendor to remediate the service path configuration.

Proactive Monitoring: Monitor system logs for the creation of unexpected executable files within the root directory (C:) and audit service configuration changes using tools like PowerShell or Group Policy.

Compensating Controls: Ensure that standard users lack the necessary permissions to write files to the root of the system drive, effectively preventing the placement of malicious binaries required to exploit this path.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the Exploit Database (EDB-ID 49841).

This vulnerability presents a significant privilege escalation vector that requires immediate attention. IT administrators should prioritize updating the Easy Anti-Cheat software across all affected endpoints to eliminate the unquoted path flaw and prevent potential system-level compromise.