GHSA-9JWW-CXG5-RJ9M Nginx UI: MCP `nginx_config_add` Bypasses Directive Validation — Authenticated RCE

Summary The MCP tool nginxconfigadd writes nginx configuration files to disk and triggers an nginx reload without calling config.ValidateConfigFile. The identical flow in the REST API POST /api/configs does call that function and correctly rejects dangerous directives. An authenticated attacker c...