An issue exists in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.
opswat media validation agent
opswat metadefender kiosk