diff --git a/app/tasks/install.php b/app/tasks/install.php
index 755e0b7e2c..483f5c5e04 100644
--- a/app/tasks/install.php
+++ b/app/tasks/install.php
@@ -129,7 +129,7 @@ $cli
             $httpsPort = Console::confirm('Choose your server HTTPS port: (default: '.$defaultHTTPSPort.')');
             $httpsPort = ($httpsPort) ? $httpsPort : $defaultHTTPSPort;
         }
-    
+
         $input = [];
 
         foreach($vars as $key => $var) {
@@ -196,7 +196,7 @@ $cli
 
         foreach ($input as $key => $value) {
             if($value) {
-                $env .= $key.'='.$value.' ';
+                $env .= $key.'='.\escapeshellarg($value).' ';
             }
         }