EIP-2026-120662

This exploit demonstrates an OS command injection vulnerability in the Cybersecurity AI (CAI) Framework 0.5.10 via the 'find_file' function's 'args' parameter. It includes functional PoC code to execute arbitrary commands (e.g., 'whoami', file creation) by injecting malicious arguments into the underlying system call.