Reason Core Security version 1.1.2 suffers from an unquoted service path privilege escalation vulnerability.