# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first

- [AG2: Newline injection in SandboxShellTool bypasses allowed=\[...\] and readonly=True, enabling arbitrary command execution](https://agentprime.io/advisories/CVE-2026-113663.md)
  `CVE-2026-113663` · CVE record: ag2ai ag2 and 1 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, CWE-184
- [Argument injection in OpenAI Codex Desktop for Windows and others](https://agentprime.io/advisories/CVE-2026-110930.md)
  `CVE-2026-110930` · CVE record: OpenAI Codex Desktop for Windows and 1 more · CVSS 8.0 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands](https://agentprime.io/advisories/CVE-2026-116779.md)
  `CVE-2026-116779` · CVE record: signalwire freeswitch · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, CWE-749
- [FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia](https://agentprime.io/advisories/CVE-2026-116786.md)
  `CVE-2026-116786` · CVE record: signalwire freeswitch · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, Code injection
- [OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution](https://agentprime.io/advisories/CVE-2026-54143.md)
  `CVE-2026-54143` · CVE record: tinyhumansai openhuman · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, Broken access control
- [ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan \`scan_ports\` parameter (\`nmap\` argument reaches \`popen\`)](https://agentprime.io/advisories/CVE-2026-82413.md)
  `CVE-2026-82413` · CVE record: ntop ntopng · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [agentscope-ai AgentScope MCP Workspace API \_config.py subprocess.Popen os command injection](https://agentprime.io/advisories/CVE-2026-123022.md)
  `CVE-2026-123022` · CVE record: agentscope-ai AgentScope · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [OS command injection in SHIRASAGI](https://agentprime.io/advisories/CVE-2026-118869.md)
  `CVE-2026-118869` · CVE record: SHIRASAGI Project SHIRASAGI · CVSS 8.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [OS command injection in OPNsense os-acme-client](https://agentprime.io/advisories/CVE-2026-123025.md)
  `CVE-2026-123025` · CVE record: OPNsense os-acme-client · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [Argument injection in iTerm2](https://agentprime.io/advisories/CVE-2026-123014.md)
  `CVE-2026-123014` · CVE record: iTerm2 iTerm2 · CVSS 8.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [Purocean Yank Note Terminal index.ts checkPermission os command injection](https://agentprime.io/advisories/CVE-2026-122157.md)
  `CVE-2026-122157` · CVE record: Purocean Yank Note · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection
- [Edimax BR-6208AC mp command injection](https://agentprime.io/advisories/CVE-2026-122051.md)
  `CVE-2026-122051` · CVE record: Edimax BR-6208AC · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Other injection, Command injection
- [radare2: Remote code execution when loading Pebble/SMD binary](https://agentprime.io/advisories/CVE-2026-108387.md)
  `CVE-2026-108387` · CVE record: radareorg radare2 · CVSS 8.5 High · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [tsParticles: Generated release notes can execute shell commands in the stable publish workflow](https://agentprime.io/advisories/CVE-2026-76826.md)
  `CVE-2026-76826` · CVE record: tsparticles tsparticles · CVSS 7.5 High · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local files](https://agentprime.io/advisories/CVE-2026-121749.md)
  `CVE-2026-121749` · CVE record: nvm-sh nvm · CVSS 4.6 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliases](https://agentprime.io/advisories/CVE-2026-121751.md)
  `CVE-2026-121751` · CVE record: nvm-sh nvm · CVSS 2.1 Low · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection, CWE-20
- [Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise](https://agentprime.io/advisories/CVE-2026-97693.md)
  `CVE-2026-97693` · CVE record: xerrors Yuxi · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection, Broken access control, Hard-coded credentials
- [Linksys E5350 apply.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-121932.md)
  `CVE-2026-121932` · CVE record: Linksys E5350 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-121931.md)
  `CVE-2026-121931` · CVE record: Linksys WRT54GL · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-121930.md)
  `CVE-2026-121930` · CVE record: Linksys WRT54GL · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Command injection vulnerability](https://agentprime.io/advisories/CVE-2026-77690.md)
  `CVE-2026-77690` · CVE record: Zohocorp ManageEngine Key Manager Plus · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection](https://agentprime.io/advisories/CVE-2026-121608.md)
  `CVE-2026-121608` · CVE record: Qihoo 360 D603-2 and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection](https://agentprime.io/advisories/CVE-2026-121607.md)
  `CVE-2026-121607` · CVE record: Qihoo 360 D603-2 and 3 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Command injection
- [Tanium addressed an unauthorized code execution vulnerability in Threat Response.](https://agentprime.io/advisories/CVE-2026-116650.md)
  `CVE-2026-116650` · CVE record: Tanium Threat Response · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Tanium addressed an unauthorized code execution vulnerability in Threat Response.](https://agentprime.io/advisories/CVE-2026-116651.md)
  `CVE-2026-116651` · CVE record: Tanium Threat Response · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Component](https://agentprime.io/advisories/CVE-2026-118865.md)
  `CVE-2026-118865` · CVE record: TP-Link Systems Inc. Archer AX3000 v2 · CVSS 7.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configuration](https://agentprime.io/advisories/CVE-2026-121621.md)
  `CVE-2026-121621` · CVE record: Red Hat Red Hat OpenShift GitOps · CVSS 8.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerability in HPE Networking VIA](https://agentprime.io/advisories/CVE-2026-95727.md)
  `CVE-2026-95727` · CVE record: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) · CVSS 7.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD execution](https://agentprime.io/advisories/CVE-2026-54161.md)
  `CVE-2026-54161` · CVE record: networkupstools nut · CVSS 8.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows](https://agentprime.io/advisories/CVE-2026-97350.md)
  `CVE-2026-97350` · CVE record: Securepoint Securepoint SSL VPN Client v2 · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal, Command injection
- [nnn through 5.3 OS Command Injection via togglex Plugin](https://agentprime.io/advisories/CVE-2026-121548.md)
  `CVE-2026-121548` · CVE record: jarun nnn · CVSS 8.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()](https://agentprime.io/advisories/CVE-2026-121429.md)
  `CVE-2026-121429` · CVE record: AzuraCast AzuraCast · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Nagios XI < 2026R2 OS Command Injection via mibs.php](https://agentprime.io/advisories/CVE-2026-119742.md)
  `CVE-2026-119742` · CVE record: Nagios Enterprises, LLC Nagios XI · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command injection vulnerability](https://agentprime.io/advisories/CVE-2026-77691.md)
  `CVE-2026-77691` · CVE record: Zohocorp ManageEngine Key Manager Plus · CVSS 8.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command Injection in IPsec VPN](https://agentprime.io/advisories/CVE-2026-105982.md)
  `CVE-2026-105982` · CVE record: Welotec TK100 and 2 more · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command Injection in Digital I/O](https://agentprime.io/advisories/CVE-2026-105981.md)
  `CVE-2026-105981` · CVE record: Welotec TK100 and 2 more · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command Injection in WireGuard VPN](https://agentprime.io/advisories/CVE-2026-105980.md)
  `CVE-2026-105980` · CVE record: Welotec TK100 and 2 more · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command Injection in ZeroTier VPN](https://agentprime.io/advisories/CVE-2026-105979.md)
  `CVE-2026-105979` · CVE record: Welotec TK100 and 2 more · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [Command Injection in Management Control Functions](https://agentprime.io/advisories/CVE-2026-105978.md)
  `CVE-2026-105978` · CVE record: Welotec TK100 and 2 more · CVSS 8.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Command injection
- [An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.](https://agentprime.io/advisories/CVE-2026-38595.md)
  `CVE-2026-38595` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal, Command injection
- [Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host](https://agentprime.io/advisories/CVE-2026-120091.md)
  `CVE-2026-120091` · CVE record: Temporal Technologies, Inc. Temporal Server · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection, Broken access control, CWE-749, CWE-1188
- [Konflux-ci: unquoted variable expansion in shell command execution](https://agentprime.io/advisories/CVE-2026-116958.md)
  `CVE-2026-116958` · CVE record · CVSS 6.7 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket](https://agentprime.io/advisories/CVE-2026-119737.md)
  `CVE-2026-119737` · CVE record: Nexbox A95X and 1 more · CVSS 8.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Control Web Panel (CWP) < 1.29 OS Command Injection via valid_token](https://agentprime.io/advisories/CVE-2026-104080.md)
  `CVE-2026-104080` · CVE record: Control Web Panel Control Web Panel · CVSS 8.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/](https://agentprime.io/advisories/CVE-2026-77880.md)
  `CVE-2026-77880` · CVE record: Control Web Panel Control Web Panel · CVSS 8.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase API](https://agentprime.io/advisories/CVE-2026-77878.md)
  `CVE-2026-77878` · CVE record: Control Web Panel Control Web Panel · CVSS 8.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directory](https://agentprime.io/advisories/CVE-2026-77876.md)
  `CVE-2026-77876` · CVE record: Control Web Panel Control Web Panel · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor](https://agentprime.io/advisories/CVE-2026-73697.md)
  `CVE-2026-73697` · CVE record: Control Web Panel Control Web Panel · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal, Command injection
- [OS Command Injection in Barracuda Appliances](https://agentprime.io/advisories/CVE-2026-111560.md)
  `CVE-2026-111560` · CVE record: Barracuda Networks Barracuda Email Security Gateway (ESG) and 4 more · CVSS 8.6 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [OS command injection in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-94349.md)
  `CVE-2026-94349` · CVE record: Dell OpenManage Enterprise · CVSS 8.0 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Argument injection in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-91909.md)
  `CVE-2026-91909` · CVE record: Dell OpenManage Enterprise · CVSS 4.6 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2026-8923.md)
  `CVE-2026-8923` · CVE record: Zohocorp ManageEngine Eventlog Analyzer and 1 more · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18199.md)
  `CVE-2026-18199` · CVE record: Zohocorp ManageEngine Password Manager Pro and 1 more · CVSS 8.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection](https://agentprime.io/advisories/CVE-2026-120345.md)
  `CVE-2026-120345` · CVE record: WAVLINK WN551X3-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection](https://agentprime.io/advisories/CVE-2026-120344.md)
  `CVE-2026-120344` · CVE record: WAVLINK WN551X3-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN536AX6-A protocol.csp host_black os command injection](https://agentprime.io/advisories/CVE-2026-120282.md)
  `CVE-2026-120282` · CVE record: WAVLINK WN536AX6-A · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection](https://agentprime.io/advisories/CVE-2026-120280.md)
  `CVE-2026-120280` · CVE record: WAVLINK WN536AX6-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection](https://agentprime.io/advisories/CVE-2026-120279.md)
  `CVE-2026-120279` · CVE record: WAVLINK WN536AX6-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Command injection
- [WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection](https://agentprime.io/advisories/CVE-2026-120277.md)
  `CVE-2026-120277` · CVE record: WAVLINK WN536AX6-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Command injection
- [WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection](https://agentprime.io/advisories/CVE-2026-120276.md)
  `CVE-2026-120276` · CVE record: WAVLINK WN536AX6-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Command injection

Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTExLTAxVDIzOjE1OjEyLjMzNTAwMFoiLCJDVkUtMjAyNi0xMjAyNzYiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/>. Everything for agents: <https://agentprime.io/llms.txt>.