This vulnerability involves incorrect permission assignment (CWE-732) for a critical executable used by the Planet9 background service from Acer. The service operates with SYSTEM-level privileges, but the executable file permissions are overly permissive, allowing non-administrative users to alter the executable. An attacker with local authenticated access could exploit this to execute arbitrary code with SYSTEM privileges when the service restarts or the system reboots. No patch or official remediation has been documented yet, and no known exploits are reported in the wild.

An authenticated local user can gain SYSTEM-level code execution by modifying or replacing the vulnerable executable. This elevates the user's privileges significantly, potentially compromising the entire system's security. The vulnerability does not require user interaction and has low attack complexity but requires local access with some privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user permissions to prevent modification of the executable and consider monitoring for unauthorized changes. Avoid running the service on systems where untrusted users have local access.