> there’s a built in way to spawn a socket server that allows the logging configuration to be updated remotely via a bespoke protocol

That sounds like there's a Log4shell-like vulnerability waiting to be found. But I couldn't even find it, I found the SocketHandler but that's just a log destination.

EDIT: shockingly, I did find it: https://docs.python.org/3/howto/logging-cookbook.html#config...