EIP-2026-119415

The exploit demonstrates an authentication bypass via session hijacking by extracting a double Base64-encoded auth_token from the vxcore.log file using a directory traversal attack. The token contains plaintext credentials, allowing unauthorized access.