The issue is related to the CorsairService Service in Corsair Utility Engine, which has insecure default permissions. This allows unprivileged local users to execute arbitrary commands by modifying the `BINARY PATH NAME` of the CorsairService, resulting in complete control of the affected system. The problem arises from the Windows "Everyone" group being granted `SERVICE ALL ACCESS` permissions to the CorsairService Service.