Nssm-2.24 Privilege Escalation Jun 2026

Before diving into the exploit, let's establish the baseline. Windows services typically run under the context of SYSTEM , LOCAL SERVICE , or NETWORK SERVICE —privileged accounts that have significant access to the operating system.

: NSSM stores its service parameters in the Registry. If the permissions on these Registry keys are too loose, a user can modify the AppParameters or Application string to execute a different command when the service starts. nssm-2.24 privilege escalation