Runic Labs

**Container Escape** Host user home directory mounted with write access into application container

**Privilege Escalation** World-writable crontab path monitored and executed by root-owned process

**RCE** Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`