HF RL Explorer

A security vulnerability (CVE-2023-38889) has been reported in the command execution logic. When an…

A security vulnerability (CVE-2023-38889) has been reported in the command execution logic. When an…: a task in LegoFlow-SWE (Harbor dataset). Steps to Reproduce: 1. Call getEffectiveGroupsForUserCommand with the username echo ALLUXIO . 2. Observe that the command echo ALLUXIO is executed, rather…

The task

**Steps to Reproduce:** 1. Call `getEffectiveGroupsForUserCommand` with the username `> echo ALLUXIO`. 2. Observe that the command `echo ALLUXIO` is executed, rather than the query failing due to a non-existent user.

Part of Lego-X/LegoFlow-SWE.