CVE-2026-11569: Ai Markdown Template Injection

Direct string substitution of template variables into executable shell blocks can lead to command injection if the parser does not escape inputs before execution.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Generic
greprules fetch cve-2026-11569-ai-markdown-template-injection --engine opengrep

Description

Direct string substitution of template variables into executable shell blocks can lead to command injection if the parser does not escape inputs before execution.