From c491376fdd33c390ed81f8110c7823d017f1ba77 Mon Sep 17 00:00:00 2001
From: Majx <25796885+M4jx@users.noreply.github.com>
Date: Thu, 2 Apr 2026 08:45:07 +0200
Subject: [PATCH] configctl: Bugfix #10075 (#10076)

quote configctl parameters to avoid skipping empty ones.
---
 src/opnsense/service/configd_ctl.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/opnsense/service/configd_ctl.py b/src/opnsense/service/configd_ctl.py
index 5692ee503f..160ebaddaa 100755
--- a/src/opnsense/service/configd_ctl.py
+++ b/src/opnsense/service/configd_ctl.py
@@ -35,6 +35,7 @@ import argparse
 import socket
 import os.path
 import traceback
+import shlex
 import sys
 import syslog
 import time
@@ -111,7 +112,7 @@ if not os.path.exists(configd_socket_name):
 if not args.command:
     exec_commands=['configd actions']
 else:
-    exec_commands=[' '.join(args.command)]
+    exec_commands=[' '.join(shlex.quote(c) for c in args.command)]
 
 if args.e:
     # use as event handler, execute configd command on every line on stdin