How would you exploit this? What can you gain if you're already able to supply OpenSSL with a private key? Is there a way to supply or tamper with private keys remotely?
I imagine you could exploit neighbors—if, for instance, a load balancer serves multiple clients and allows uploading private keys, this could allow snooping their traffic AS a client.
