EIP-2026-102813

This exploit leverages a lack of file authorization checks in the calendar utility of bsdmainutils on Debian systems. By creating a malicious calendar file with embedded content from sensitive files (e.g., /etc/shadow), an attacker can disclose arbitrary file contents when the utility is run as superuser with the '-a' argument.