A critical stack-based buffer overflow and missing authorization vulnerability exists in Thales Sentinel Keys Server on Windows versions prior to 1.3.8.0. The vulnerability arises because the server does not validate the length of the first field in an HTTP request, allowing an attacker to craft a malicious request that may lead to remote code execution with NT AUTHORITY\SYSTEM privileges.