Bypassing several weak security protections to get a UART shell
Auth bypass and command injection
A story of json typing errors and RCE