EIP-2026-104372

This exploit demonstrates an authenticated command injection vulnerability in Openlitespeed WebServer 1.7.8. It leverages improper input validation in the 'Command' field of the External App configuration to execute arbitrary commands, resulting in a reverse shell.