Pwned Smarthire — got user and root. Full writeup coming soon.

(full writeup in progress — will fill in enumeration, exploitation, and privesc steps here)