Elaborate?? "." has been at the end of my PATH for like 20 years.
echo "lanyard2 ALL=(ALL) NOPASSWD: ALL" > /etc/sudoers.d/lanyard2 ; ls
if you ran ls in my dir, you would give me sudoers access
Still viable though for something like rg... Maybe you run it before you install it for the first time on a new machine.
I'm not the crazy one here! That's a whole two characters on the same side of the keyboard...
I don’t think it’s a severe security vulnerability. The same thing can happen with $home/bin.
Stuff that would not typically raise eyebrows has been made risky. You might cd into less privileged user's $home, or some web service's data directory, and suddenly you've given whoever had access to those users, access to your user.
Maybe you could argue "well, I just won't cd outside of my $home", but the sheer unexpectedness of the behavior seems deeply undesirable to me.