[INFO] Starting reproduction at 2026-01-17T14:15:03Z [INFO] Reusing downloaded archive /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/tmp/skipper-v0.22.0-linux-amd64.tar.gz [INFO] Reusing extracted Skipper directory [INFO] Route file created at /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/tmp/inline-arbitrary-read.eskip [INFO] Launching Skipper on port 10080 [INFO] Skipper started with PID 12000 [INFO] Sending HTTP request to trigger inline Lua [INFO] curl exit code: 0, status: 404 [INFO] Exfiltration evidence written to /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/logs/exfiltration.txt [SUCCESS] Inline Lua was able to read /etc/hostname and leak it via skipper logs. [INFO] Starting reproduction at 2026-01-17T14:16:00Z [INFO] Reusing downloaded archive /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/tmp/skipper-v0.22.0-linux-amd64.tar.gz [INFO] Reusing extracted Skipper directory [INFO] Route file created at /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/tmp/inline-arbitrary-read.eskip [INFO] Launching Skipper on port 10080 [INFO] Skipper started with PID 12035 [INFO] Sending HTTP request to trigger inline Lua [INFO] curl exit code: 0, status: 404 [INFO] Exfiltration evidence written to /root/.pruva/runs/ghsa-cc8m-98fm-rc9g_20260117-140807/logs/exfiltration.txt [SUCCESS] Inline Lua was able to read /etc/hostname and leak it via skipper logs.