Winboat lets you "Run Windows apps on 🐧 Linux with ✨ seamless integration"

I chained together an unauthenticated file upload to an "update" route and a command injection in the host election app to active full "drive by" host takeover in winboat.