An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks.
http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html