EIP-2026-101128
PRE-CVEQuantum vmPRO 3.1.2 - Local Privilege Escalation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-101128. PoCs published by xistence.
AI-analyzed exploit summary The exploit reveals a hidden backdoor command in Quantum vmPRO 3.1.2 and below, allowing non-admin users to escalate privileges to root via SSH by executing 'shell-escape'. The vulnerability resides in '/usr/local/pancetera/bin/cmd_processor.py', which spawns a root shell without proper authorization checks.
Description
Quantum vmPRO 3.1.2 - Local Privilege Escalation
Exploits (1)
The exploit reveals a hidden backdoor command in Quantum vmPRO 3.1.2 and below, allowing non-admin users to escalate privileges to root via SSH by executing 'shell-escape'. The vulnerability resides in '/usr/local/pancetera/bin/cmd_processor.py', which spawns a root shell without proper authorization checks.