@akindyakov @Max when you say "this vulnerability is not very dangerous for us" are you referring to osquery, or to Facebook? Do you have details of the vulnerability? From my very uninformed perspective (please inform me if you know more about this vulnerability), I get the impression that anyone who can control queries run on an osquery client can achieve remote code execution and/or privilege escalation on that client. In many osquery deployments, the security model does not anticipate that allowing query access would enable RCE/privesc. Is it the case at Facebook that any user who could run a query on a host could also achieve root SSH access to that host?