EIP-2026-104442

This exploit demonstrates an arbitrary file upload vulnerability in Socket.io-file <= 2.0.31 due to improper input validation. It allows an attacker to write arbitrary data to any file on the server by manipulating the file path in the createFile request.