AIKIDO-2026-549490

TL;DR

The open crate passes caller-supplied URLs and file paths directly to the platform launcher without sanitizing them. On Unix-like systems, a path beginning with a dash is forwarded to the opener as a command-line option rather than a positional argument, allowing an attacker who controls the target to inject launcher flags. On Windows and WSL, the target is embedded inside a PowerShell -Command string, so metacharacters in an attacker-controlled path are interpreted as PowerShell syntax and can lead to arbitrary command execution. The fix passes the target through the OPEN_RS_TARGET environment variable so it is never interpolated into a shell command string, and uses end-of-options -- separators to prevent dash-leading paths from being parsed as options.