EIP-2026-104137

This exploit demonstrates a security-bypass vulnerability in Xpdf where a maliciously crafted filename can lead to unintended file deletion due to improper handling of filenames with spaces and quotes. The PoC shows how a victim file can be removed by exploiting Xpdf's error handling and shell command injection.