EIP-2026-102795

This exploit leverages a vulnerability in Calibre's mount helper to mount a crafted vfat filesystem over /etc, allowing an attacker to modify /etc/passwd and gain root access with the password 'toor'. It demonstrates a local privilege escalation (LPE) by abusing improper filesystem mounting permissions.