MoviePilot let the model decide whether a command was dangerous

CVE-2026-77931: MoviePilot let injected content reach ExecuteCommandTool with confirm_dangerous set by the model itself, bypassing the command denylist inside the admin session.