EIP-2026-104581

This is a functional format string exploit targeting a vulnerability in OSX's launchd (CVE-2026-127554). It leverages a format string vulnerability to overwrite a saved return address with shellcode, achieving local privilege escalation by executing a setuid shell.