CVE-2026-117573

The hagent tool (through commit 761eec6) is vulnerable to an OS command injection vulnerability within the hagent_arduino and hagent_esp32 tools. The flaw exists because the args parameter is improperly sanitized, allowing attackers or prompt-injected agents to supply metacharacters that are inte...