Administrator code execution via writable installer folder

Privilege escalation in Trend Micro Deep Security Agent 20.0 before 20.0.1-23340 allows local users to execute code as an administrator. The agent installer creates a product folder with permissions that permit low-privileged modification, establishing an uncontrolled search-path condition. Exploitation requires low-privileged local code execution and subsequent administrator interaction; successful exploitation runs code at medium integrity in the administrator context.