EIP-2026-105687

The exploit demonstrates a local file inclusion vulnerability in CakePHP by using path traversal sequences (%2e.//) to access arbitrary files (e.g., /etc/passwd). The vulnerability arises from insufficient input sanitization in the theme and DebugKit components.