// htb writeup 2026-02-25
Environment
HackTheBox Medium
root obtained // PWNED

🌱 HTB: Environment

Laravel env bypass → Avatar CVE → Vault creds → sudo BASH_ENV → root

Writeup is private while the box is still active. Full version will be published upon retirement.