EIP-2026-111811

This exploit demonstrates a remote file inclusion vulnerability in RSSonate due to insufficient sanitization of user-supplied input in the PROJECT_ROOT parameter. An attacker can include arbitrary remote files, potentially leading to remote code execution.