CVE-2026-72735: Yaml Stringify Command Injectioncve-2026-72735-yaml-stringify-command-injection
YAML serialized configuration string is interpolated directly into a shell command string. Because YAML output can contain single quotes from user input that are not escaped for shell execution, this leads to OS command injection. Base64 encode the serialized output prior to command execution or avoid shell execution.
