Local privilege escalation via unquoted search path

Unquoted search path handling in Acronis Cyber Protect Cloud Agent before build 39378 allows local users to gain privileges on Windows. A privileged agent process can resolve an attacker-placed executable from a parent directory when launching an unquoted path containing spaces. Exploitation requires low-privileged local filesystem access and user interaction, and it executes code with the privileged process's rights.