Local root escalation via unsanitized shell input

Improper input validation in bash and zsh in Apple macOS allows local users to gain root privileges through a malicious app. Apple identifies insufficient input sanitization in bundled bash and zsh but has not published the affected input path or the privileged operation that consumes it. Local code execution as a low-privileged user is required, and successful exploitation elevates the app to root without user interaction.