CVE-2026-32094: Shescape Missing Bracket Glob Escape

Missing escaping of square brackets in shell execution context, allowing glob expansion bypass.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-32094-shescape-missing-bracket-glob-escape --engine opengrep

Description

Missing escaping of square brackets in shell execution context, allowing glob expansion bypass.