Local privilege escalation with arbitrary code execution

Improper privilege management in ZTE PROCESS Guard service ZXCLOUD-iRAI-ClientV7.2X allows local users to execute elevated code. ZTE states that the service permits local arbitrary code execution, privilege escalation, and a path-traversal bypass, but has not disclosed the affected interface or unsafe operation on attacker-controlled input. Exploitation requires existing low-privilege local access and no user interaction, and successful abuse crosses a privilege boundary on the client host.