Local privilege escalation via repair process hijacking

Privilege assignment flaw in BeyondTrust Endpoint Privilege Management for Windows before 24.1 allows local users to run arbitrary programs elevated. The repair workflow exposes an elevated process that a low-privileged repair initiator can hijack to launch an arbitrary program. Reachability requires local authentication and permission to initiate repair; anti-tamper and policy restrictions mitigate the attack, and successful exploitation grants elevated execution.