Overly broad env vars access + apparent privilege escalation by running shell

Overly broad env vars access + apparent privilege escalation by running shell #206