Anthropic published a blog post claiming RCE with it [0].

[0]: https://www.anthropic.com/research/discovering-vulnerabiliti...