I think the point though, is that it&#x27;s more than just a single  old Rails YAML bug. The privilege escalation shouldn&#x27;t have been there. Their infrastructure would still be vulnerable even without the initial exploit.