remote-terminal

The server has critical command injection vulnerabilities. In `src/tools/sftp_compression_tar.py`, the `extract_tarball_via_ssh` function constructs `tar` commands using `remote_archive_path` and `remote_extract_path` without proper shell quoting. Similarly, in `src/tools/sftp_compression_upload.py`, the `chmod -R` command uses `remote_dir` without quoting. This allows a malicious actor (e.g., a jailbroken AI or manipulated input) to inject arbitrary shell commands, leading to remote code execution on the connected server. While some path sanitization (`validate_path`) and `shlex.quote` are used in other parts (e.g., single file SFTP, backup creation), these critical directory transfer commands are unprotected. The system also inherently trusts the AI to generate safe commands, making a jailbroken AI a significant risk.