Shell Arithmetic Expansion and Evaluation Abuse

This report analyzes a class of Bash/ksh arithmetic-evaluation vulnerabilities where untrusted environment variables can cause information leakage, numeric assignment to shell variables, PATH overwrite leading to command hijacking, and unconditional command execution via array-index command substitution; it includes PoCs that demonstrate gaining a privileged shell and recommends input sanitization and careful quoting as mitigations.