In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.
CWE-862, CWE-862