Cap Admin Escape

Challenge Question

This container was granted a single extra Linux capability for a legitimate-sounding reason: mounting an in-app filesystem. That one capability, on its own, turns out to be enough to escape the container entirely and execute code on the host as root.