CVE-2026-68766 [HIGH] – hashcat fails to restrict command-line options when parsing restore files, allowing attack

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like –outfile and –potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code execution when targeting shell startup files.