CVE-2026-109569: Nsenter Attach Missing Root Flagcve-2026-109569-nsenter-attach-missing-root-flag
nsenter is invoked with an argv that enters a target process's mount namespace (--target <pid> --mount ...) and runs "/bin/sh -lc", but the argv contains no --root flag. nsenter only switches namespaces: without --root the spawned shell keeps the caller's root directory (the host's), so every absolute path in the payload resolves against the host filesystem
