Local privilege escalation via pipe-delimited command injection

Command injection in Linuxfabrik Monitoring Plugins before 6.0.0 and linuxfabrik-lib before 5.0.0 allows local users to gain root via crafted plugin arguments. Affected checks place user-controlled values such as restic-check --repo into command strings passed to lib.shell.shell_exec(), which splits on pipe characters and executes the injected segment as a separate command. Exposure requires control of a nagios or icinga account and a plugin that runs through the sudoers allowlist, which turns plugin-level command execution into root-level code execution.