TensorFlow model exploit → RCE → SQL creds → MD5 crack → RESTIC misconfig → Root via SUID bash
Writeup is private while the box is still active. Full version will be published upon retirement.