EIP-2026-103807

This exploit leverages improper handling of environment variables in LSF 5.1's 'lsadmin' binary to execute arbitrary code with elevated privileges. It sets LSF_SERVERDIR to the current directory, allowing the attacker to execute a malicious binary ('lim') as root, which then reads and outputs the first line of /etc/shadow.