EIP-2026-118393

This exploit leverages the Cuckoo Sandbox Guest XMLRPC interface to achieve privileged remote code execution by uploading a malicious ZIP file containing a Python script that spawns a process (e.g., calc.exe) with Administrator privileges. It assumes the Cuckoo agent is running with elevated privileges and the attacker has access to the XMLRPC port.