Guardrails AI versions up to 0.6.7 have a critical code injection vulnerability in the Hub package installation mechanism. This flaw allows an attacker who can publish malicious packages to the Guardrails Hub to execute arbitrary code on any system that installs such a package. The vulnerability arises because the post_install script path is constructed from untrusted manifest data without proper validation or sanitization, enabling remote code execution.