Check Vulnerable Library in Cron Script

If a root cron script imports a library you can write to, modify that library to run your payload.

Look for writable libraries imported by privileged cron scripts to hijack execution.