EIP-2026-102896

This exploit leverages an unsanitized LD_LIBRARY_PATH environment variable in PonyOS 4.0's dynamic linker to achieve local privilege escalation. It compiles a malicious shared library to override a legitimate function, then executes a setuid binary with the manipulated environment.