EIP-2026-114679

This exploit demonstrates a sandbox escape in Frappe Framework (ERPNext) 13.4.0 by leveraging RestrictedPython's unsafe access to `gi_frame` and `format_map` to achieve remote code execution. It requires authentication with the 'System Manager' role and `server_script_enabled` set to `true`.