EIP-2026-104596

This exploit leverages a vulnerability in Dropbox's FinderLoadBundle on OS X, where a hard link to the setuid root binary allows loading a malicious shared library from a user-controlled directory, resulting in local privilege escalation to root.