The vulnerability of the Cockpit server management system arises from improper handling of file names for PHP `include` or `require` functions, allowing an attacker to execute arbitrary code.

The vulnerability of the Cockpit server management system is related to incorrect handling of file names for PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...