Bash Bypass Wave (8 fixes)

Description

Eight Bash permission bypasses patched across v2.1.97-98. All were readable in the leaked source map (permission validator logic) and became public attacker knowledge. Patterns: backslash escape (rm -rf /), compound command (safe && dangerous), plus pipelines, command substitution, redirects, and env-var injection.

Key claims

Relations

Sources

src-20260419-3e34d5830692