Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.
CWE-285