Embed Notice

@FloatingGhost@ihatebeinga.live modifying the source code could theoretically get you in, but yeah, without a way to recompile and reload that specific module immediately, which I feel reasonably confident in saying an attacker lacks without immediate RCE, this doesn't equal instant RCE. Same goes for modifying the BEAM file, it won't be spontaneously loaded and ran.

If this vulnerability were real, this would make the lack of disclosure even more ridiculous, since it'd be a ticking time bomb, and not a fait accompli that every instance is already compromised.