Local privilege escalation via unquoted service path

Unquoted service path handling in TOSIBOX Key Service 3.3.0 and earlier allows local users to execute code with elevated privileges. The Windows service registers an executable path containing spaces without enclosing quotation marks, so startup can resolve an attacker-planted executable from the system root. Exploitation requires a local non-privileged user to place code in that root path; it then runs with the service privileges at application startup or reboot.