AIKIDO-2026-10524

TL;DR

Improper neutralization of special elements in OS command strings in Griptape CommandRunner allowed shell injection because commands were executed with subprocess.Popen(..., shell=True). An attacker able to influence command input could inject shell metacharacters such as pipes, redirects, or command chaining operators to execute unintended system commands. Successful exploitation could result in arbitrary command execution with the privileges of the running process.