Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.
CWE-1287