A local privilege escalation vulnerability in Luidia eBeam Education Suite 2.5.0.9 allows attackers to execute arbitrary code with LocalSystem privileges.

The application utilizes an unquoted service path for the eBeam Device Service. By placing a malicious executable in a specific directory along the unquoted path, a local user can trigger the execution of arbitrary code with LocalSystem privileges during service startup.

This vulnerability carries a CVSS score of 7.8, reflecting its significant risk to local system integrity. Successful exploitation grants an attacker full control over the affected workstation, enabling the installation of malware, theft of sensitive local data, or further movement within the network. This represents a severe threat to organizations using the affected suite in classroom or office environments.

Immediate Action: Since no official patch is available, administrators should manually apply quotes to the service path via the Windows Registry or disable the eBeam Device Service if it is not required for daily operations.

Proactive Monitoring: Monitor system logs for unauthorized service modifications or the creation of suspicious executable files within the Program Files directory structure.

Compensating Controls: Implement strict file system permissions to prevent unprivileged users from writing files to the directory paths used by system services, effectively neutralizing the ability to plant malicious binaries.

Public Exploit Available: Yes, a proof-of-concept exploit is available via ExploitDB (EDB-ID 49647).

Given the availability of a public proof-of-concept and the high severity of potential privilege escalation, organizations must treat this vulnerability with urgency. Administrators should prioritize securing the service configuration on all affected endpoints to prevent unauthorized local users from gaining administrative control over the host.