EIP-2026-103045

This exploit demonstrates a symbolic-link attack against xNBD due to insecure handling of temporary files. By creating a symlink from /tmp/xnbd.log to a target file, an attacker can overwrite arbitrary files with the privileges of the xnbd-server process.