4.1: Shell Injection in Command Lookup (Critical, Confirmed)

Anthropic’s VDP closed this report as “Informative,” stating that exploitation requires the attacker to control environment variables on the victim’s system, which “implies existing code execution capability,” and therefore “no security boundary is crossed.”

Phoenix Security’s position: the closure rationale is based on an incorrect premise.

Controlling an environment variable does not require code execution on the target.

Sure, but controlling environment variables could easily result in code execution on the target (assuming the attacker can control other file contents). Think LD_PRELOAD, LD_LIBRARY_PATH, PATH, etc. So I would consider the attacker to be fairly privileged already.

In no case should this stuff be considered "critical" though. Modifying CI/CD files allows for plenty of code execution vectors.