xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.