Yubico ykman-gui (aka YubiKey Manager GUI) prior to 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as Administrator.