Dataedo Portal Hangfire scheduler SQL injection RCE

Portal login → repository connection-string → SQL inject Hangfire job Process.Start requires sqlcmd to agent DB. """Dataedo Portal 26.2.8 with Dataedo Agent 26.2.8 - Unrestricted Job-Type Deserialization in the Agent Scheduler Storage, Reached Through the Repository Connection-String API CWE-502"...