A crafted regular expression in a CI/CD file could let an unauthenticated stranger run code on a self-managed server.