Command-Line Safety Tool Vulnerability in Destructive Command Guard by Dicklesworthstone

CVE-2026-77474

What is CVE-2026-77474?

The Destructive Command Guard, a command-line safety tool, is vulnerable due to inefficient rescanning of nested or unclosed command substitutions. When a command includes nested $() or $(( sequences, the tool may enter exponential time work processes, causing significant performance degradation and potentially allowing destructive commands to execute without proper checks. This is particularly concerning if a PreToolUse hook hangs, as it bypasses the safeguards intended to prevent command execution. The issue has been addressed in version 0.6.6, which enhances the tool's resilience against such nested scenarios.

References