New exploitation reports turn Veeam Agent's readable elevated-session identifier into a standard-user-to-SYSTEM path.

A local standard user can read an elevated session UID from the Veeam service log, reuse it through the gRPC named pipe and submit a command executed as SYSTEM because the UID is not bound to its original user or connection. A fixed build exists, but affected end-of-life systems remain in scope.