EIP-2026-103920

This is a functional proof-of-concept for a CSRF vulnerability in Helix Server, allowing an attacker to add a new admin user by tricking a logged-in user into visiting a malicious page. The exploit leverages a crafted HTML image tag to submit an unauthorized request to the server.