I found a COMMAND_INJECTION in a 25k ⭐ AI coding assistant (in 3 seconds)

Last week I scanned serena — a popular AI coding assistant with 25k ⭐. [BLOCK] COMMAND_INJECTION agent.py:1222 subprocess.Popen(cmd, shell=True) → config value → arbitrary shell execution The scan took 3 seconds. The bug had been in the repo for months. # AI generates this pattern constantly def run