EIP-2026-103029

This exploit leverages a buffer overflow in VFU 4.10-1.1 by creating a file with a long filename (115+ chars) and manipulating the move entry function to execute arbitrary commands. The PoC drops a shell script and triggers the overflow to achieve RCE with user privileges.