Local privilege escalation via writable configuration commands

Local privilege escalation in Thinkst Applied Research OpenCanary before 0.9.4 allows local users to execute commands as root. The configuration loader consumes command-bearing Python logging objects from a user-writable configuration file and executes their command values without establishing trusted ownership. Exploitation requires an unprivileged user to modify that file and a privileged process to start or reload the daemon, after which the injected commands run with root authority.