EIP-2026-100773

This exploit demonstrates a directory traversal vulnerability in cgit's `cgit_clone_objects()` function, allowing unauthorized access to arbitrary files on the server when `enable-http-clone` is enabled. The PoC uses a crafted HTTP request to retrieve `/etc/passwd` via path traversal sequences.