shtool contains a security flaw which could allow a malicious local user to delete arbitrary files with the rights of the user who use shtool.