EIP-2026-102354

This exploit targets an unauthenticated file upload vulnerability in Apache Flink 1.9.x, allowing remote code execution by uploading a malicious JAR file and executing arbitrary commands. The PoC includes methods for version detection, JAR upload, command execution, and cleanup.