I am not surprised, in the general sense that someone has found a security bug in a large and complex piece of software. This is basically another good example

I am not surprised, in the general sense that someone has found a security bug in a large and complex piece of software. This is basically another good example of why your control plane should be only accessible through a vpn/bastion.