MSI Center flaw allows SYSTEM-level code execution

AI summary

A security researcher found a vulnerability in MSI Center’s Notebook Foundation service that exposes a named pipe accessible to authenticated users. By abusing its command interface, an attacker could read or modify registry settings, change Windows security settings, or execute arbitrary programs as LocalSystem.