The report claims unsanitized input to POST /v1/sandboxes/{id}/exec allows arbitrary command execution. Reviewed against the codebase: the exec endpoint intentionally runs caller-supplied commands inside an isolated KVM sandbox - that is the documented product behavior, not an injection path. No privilege boundary is crossed; /etc/passwd read is scoped to the disposable VM. No CVSS applies. Suggested reply drafted below.