EIP-2026-118885

The exploit demonstrates a filename parsing flaw in Windows PowerShell ISE where specially crafted filenames with array brackets can hijack script execution, leading to remote code execution. The PoC creates two PowerShell scripts, one benign and one malicious, to exploit this behavior.