A single misconfiguration could have allowed attackers to inject malicious code to launch a platform-wide compromise