Congrats ,That was so Creative , i think if you dig deeper into the app you will get the RCE, also 6 months is too long to deal with bugs like this critcal one , imagine what happen if a black hat hacker found these bugs and exploit them?