EUVD-2026-17205

DSAI-Cline implements a command filtering mechanism that attempts to prevent OS command injection by detecting dangerous shell operators (semicolons, logical operators &&/||, pipes, and command substitution patterns). However, the validation logic uses string-based parsing that fails to account for raw newline characters (\n) as command separators. In PowerShell and many Unix shells, newline characters function as command terminators and separators, equivalent to semicolons. An attacker can craft a payload such as 'git log\nmalicious_command' where the newline is treated as a valid separator by the shell interpreter while remaining undetected by the whitelist parser. This allows the first (whitelisted) command to execute normally, followed immediately by arbitrary malicious code. The root cause is insufficient input validation that does not normalize or filter all shell metacharacters and separators before approval logic is applied.