An Uncontrolled Search Path Element vulnerability exists in JohnsonControls AC2000 on Windows. This flaw allows manipulation of configuration file search paths, potentially leading to security issues. It affects AC2000 versions from 10.6 before release 10, from 11.0 before release 9, and from 12 before release 3. The vulnerability has a high severity rating with a CVSS score of 8.4.