AIKIDO-2026-674766

TL;DR

The generated bash activate script and activate.fish script interpolate a shlex.quote-ed path into a position that is quoted a second time, so the extra quotes terminate early and leave part of the value parsed as shell code. In activate, this triggers on the branch that reports a relocated virtual environment, so a virtual environment path containing $(...), backticks, or ; runs commands when a user sources the script. In activate.fish, the same double quoting around the TCL_LIBRARY and TK_LIBRARY paths lets a parenthesized command substitution in the interpreter's library path execute on source. The fix moves the placeholders outside the surrounding quotes so each value keeps only its original shlex.quote quoting.