I read this as them breaking out of a Python sandbox into a container. That also squares with MSFT scoring this "moderate" severity.