PT-2026-111196

Summary: 5 findings — BashTool shell-injection sink F6, the canonical RCE primitive, BackgroundRunTool async shell-injection sink F7, backtest exec module runs top-level statements before the SignalEngine class check F8 — independent RCE path that does not match BashTool signatures, read url...