A user with a compromised configuration can start an unsigned binary as a service.
pega synchronization engine