Apparently people can get access to /root when they're not supposed to, because of this: cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33909 Does anyone know how it works?