EIP-2026-102369

This exploit targets GitBucket 4.23.1 by abusing a weak secret token and insecure file handling to achieve unauthenticated remote code execution (RCE) on Windows systems. It brute-forces a Blowfish key to upload a malicious JAR file via the Git LFS endpoint, then executes arbitrary commands.