EIP-2026-102794

This exploit leverages a SUID mount helper in Calibre that uses execlp to execute 'mount', allowing PATH manipulation to execute a malicious 'mount' script as root. The script creates a temporary directory, writes a malicious 'mount' executable, and overrides PATH to gain root privileges.