fix: remove unsafe exec() in checkPackageRuning.py

[orbisai0security]

Summary

Fix critical severity security issue in packaging/checkPackageRuning.py.

Vulnerability

Field	Value
ID	V-005
Severity	CRITICAL
Scanner	multi_agent_ai
Rule	V-005
File	packaging/checkPackageRuning.py:50

Description: The packaging script constructs OS shell commands by directly interpolating the serverHost variable using Python % string formatting without any sanitization or validation. An attacker who can control the serverHost value (via command-line argument, environment variable, or configuration file) can inject shell metacharacters to execute arbitrary operating system commands with the full privileges of the packaging process.

Changes

• packaging/checkPackageRuning.py

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[zitsen]

LGTM. Clean fix — input validation + list-form subprocess + secure tempdir. No new issues. Ship it.

[zitsen]

Is this duplicated with #35276 ?

[orbisai0security]

No, these are different vulnerabilities in the same file.