Ricky “Headlesszeke” Lawshae

The issue allows attackers to calculate passwords for special sudo accounts using information accessible to regular users. This could enable them to execute hidden API calls and escape the sandbox environment with elevated privileges.