Hashicorp Vagrant Remote Code Execution via insecure image download