EIP-2026-101128

The exploit reveals a hidden backdoor command in Quantum vmPRO 3.1.2 and below, allowing non-admin users to escalate privileges to root via SSH by executing 'shell-escape'. The vulnerability resides in '/usr/local/pancetera/bin/cmd_processor.py', which spawns a root shell without proper authorization checks.