av4nth1ka/jinjava-cve-2026-25526-pocStep-by-step exploit harness and proof-of-concept for CVE-2026-25526 in Jinjava, demonstrating file read, file creation, and info disclosure with patch verification.
Step-by-step exploit (all 9 steps):
mvn exec:java -Dexec.mainClass=ExploitHarness -q
Final exploit chains (file creation, file read, info disclosure):
mvn exec:java -Dexec.mainClass=ExploitFinal -q
File content exfiltration (reads /etc/passwd, /etc/hosts):
mvn exec:java -Dexec.mainClass=ExploitFileRead -q
Patch verification (change version in pom.xml to 2.8.3, proves 2.8.3 blocks everything):
mvn exec:java -Dexec.mainClass=PatchVerification -q
Refer blog: https://av4nth1ka.github.io/jinjava-rce-cve-2026-25526/
