Privilege escalation via planted cleanup executable

Command injection in McAfee Agent for Windows before 5.7.5 allows local users to execute arbitrary code with elevated privileges. The deployment cleanup path executes a locally planted clean.exe without ensuring that it is the intended trusted cleanup program. Local access and invocation of the System Tree deployment feature are required; successful exploitation can open a reverse shell and elevate privileges.