EIP-2026-114678

This exploit demonstrates a directory traversal vulnerability in copyparty versions <=1.8.2, allowing unauthorized access to files outside the web root via a crafted HTTP GET request to the `.cpr` subfolder. The PoC uses `curl` to retrieve `/etc/passwd` as proof of the vulnerability.