EIP-2026-107776

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in Ignition 1.3 due to improper input validation in the 'page' parameter. The PoC shows how an attacker can traverse directories to read arbitrary files, such as '/etc/passwd', by appending null bytes to bypass file extension checks.