Remote code execution via injected Nmap options

Argument injection in python-libnmap 0.7.2 and earlier allows remote attackers to execute code through an unvalidated scan target. NmapProcess appends each target to the Nmap command line without rejecting a leading option delimiter, so a crafted target can inject --script and run attacker-controlled NSE code. Exploitation requires a client application to pass network-supplied input into NmapProcess; the vendor disputes that its documentation supports this use.