EIP-2026-103777

This writeup details an information disclosure vulnerability in HyperVM/Kloxo where backup files in /tmp are world-readable, exposing root passwords, private keys, and other sensitive data. The exploitation involves restoring a backup and accessing the temporary files before they are deleted.