Root command execution via unsafe Perl scanning

Command injection in needrestart before 3.8 allows local users to execute arbitrary shell commands as root during Perl process scans. A pipe-suffixed attacker-controlled Perl script path reaches Module::ScanDeps::scan_file, whose two-argument open interprets the path as a shell command. Exploitation requires a local user process and a privileged needrestart run with interpreter scanning enabled, which is the default and occurs through package-management hooks.