A vulnerability in the automation-controller's input-validation function sanitize_jinja() allows low-privileged users to inject Jinja expressions that bypass intended restrictions. This flaw enables arbitrary command execution and unauthorized disclosure of secrets across credential boundaries in the execution environment.