Local code execution via unescaped tutorial inputs

Code injection in NVIDIA Megatron Bridge before 0.2.2 allows local users to execute code through malicious data-merging input. The data-merging tutorial inserts user-controlled values into shell commands without escaping them, allowing shell metacharacters to alter the command. Exploitation requires local low-privilege access and execution of the affected tutorial; injected code runs with the tutorial process's privileges and can expose or modify data.