A local privilege escalation vulnerability in Cobian Backup 0.9.93 allows unauthorized users to execute arbitrary code with LocalSystem privileges.

The application utilizes an unquoted service path for the CobianReflectorService, which permits a local attacker to perform binary planting. By placing a malicious executable in the path, the attacker can trigger code execution with LocalSystem privileges during the service startup process.

Successful exploitation of this vulnerability grants an attacker full administrative control over the affected system. This level of access facilitates the installation of backdoors, theft of sensitive data, and potential lateral movement within the network, justifying the high CVSS score of 8.4.

Immediate Action: Upgrade to the latest version of Cobian Backup to ensure the service path is properly quoted or remediated.

Proactive Monitoring: Audit system services for unquoted paths using tools like PowerUp or manual registry inspection to identify similar vulnerabilities on other installed software.

Compensating Controls: Restrict local write permissions on the directory paths where services are located to prevent unauthorized users from planting malicious binaries.

Public Exploit Available: Yes, a proof-of-concept exists via the Exploit-DB entry 50810.

Given the potential for full system compromise, organizations should treat this vulnerability with high priority. We strongly recommend identifying all systems running the affected version of Cobian Backup and applying the vendor-provided update immediately to eliminate the unquoted service path risk.