PT-2026-90713

Sandbox escape: symlink traversal via /oldroot allows writing files outside sandbox during setup...