Plastic SCM (Unity VCS): Unauthenticated 8087 Name-Only ACL RCE

Plastic SCM on-prem plasticd: default NameWorkingMode checks only that a declared username maps to a local OS account — never a password — and the default EVERYBODY ACL grants ALL_PERMISSIONS. Any network attacker who reaches the default-bound 8087 port creates a trigger with an attacker-controlled Path fed straight into Process.Start — unauthenticated RCE as plasticd.