Privilege escalation via hard-coded executable search path

Uncontrolled search path handling in GitoxideLabs gitoxide gix-path 0.10.8 allows local users to execute code as another user on Windows. The gix_path::env fallback checks hard-coded Program Files locations after PATH lookup fails and directly executes git.exe from a location a limited account can create. Exploitation requires a 32-bit system, a local account, no real git.exe on the target user's PATH, and a separate user or service to invoke an affected application.