AIKIDO-2025-10902

TL;DR

Affected versions of this package are vulnerable to command injection in the file data source implementation due to the use of IO.read for file access, which interprets filenames as shell commands, allowing attackers to execute arbitrary code by crafting malicious file paths containing shell metacharacters. This vulnerability arises because IO.read invokes the shell, enabling remote code execution if the application processes untrusted input. Replacing IO.read with File.read ensures direct, shell-free file access, mitigating the risk. Attackers could exploit this by injecting commands into filename parameters, potentially compromising the system.