EIP-2026-118755

The exploit demonstrates an unauthenticated arbitrary file write vulnerability in Mako Server v2.5, leading to remote command execution via HTTP PUT requests to 'save.lsp' and subsequent execution via 'manage.lsp'. It also includes proof-of-concept code for file disclosure and SSRF vulnerabilities.