EIP-2026-112598

The exploit demonstrates an arbitrary file download vulnerability in Tequila File Hosting 1.5 due to insufficient path validation, allowing attackers to read sensitive files via directory traversal. It also includes an unrestricted file upload PoC and XSS examples.