AIKIDO-2026-11014

TL;DR

The Dockerfile generator improperly interpolated untrusted runtime inputs such as package names, environment variables, setup commands, and working directory values directly into RUN, ENV, and WORKDIR instructions without sufficient validation or escaping. This could allow command injection during container image build, potentially resulting in arbitrary command execution in the build environment. An attacker able to control these runtime values could supply crafted input such as shell metacharacters or chained commands to execute unintended operations, modify the generated image, exfiltrate secrets available at build time, or disrupt the build process. The issue is mitigated by strict input validation, safe quoting, and rejection of dangerous characters and multiline payloads.