EIP-2026-118721

The document details a command execution vulnerability in LAN.FS Messenger v2.4, where the 'Computername' field in the 'Computersettings' module can be manipulated to execute arbitrary system commands or inject malicious script code. The vulnerability is exploited via the Messenger Service, requiring no user interaction beyond an active conversation.