devtrackers.gg
Hey OP!
While we did roll out a fix for this a week ago we know it's still possible to perform under certain conditions. We have a reproduction case running and we're working on a new fix.
The reason BattlEye isn't blocking this is because BattlEye specifically blocks cheating programs, but not input macros. They're most likely using an input macro to perform a series of actions on the fly to perform this exploit.