The vulnerability stems from the niaservice service being installed with an unquoted executable path. If a local attacker can place a malicious executable in any intermediate directory that appears in the service configuration, the service will launch that executable with LocalSystem privileges when it starts or restarts. This directly allows arbitrary code execution with administrative rights on the affected machine.

Network Inventory Advisor version 5.0.26.0, specifically the niaservice service installed on Windows systems without a quoted binary path.

The CVSS score of 8.5 reflects a high severity local privilege escalation flaw. No EPSS score is available, and the vulnerability is not currently listed in the CISA KEV catalog. Attackers require local access or the ability to write to directories on the target system. If exploited, the attacker can gain full administrative control, install malware, and maintain persistence. The flaw is inherent to the service configuration and does not require additional authentication or special conditions beyond file write permissions in the path.