# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-22761.md)
  `CVE-2026-22761` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-26942.md)
  `CVE-2026-26942` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-26943.md)
  `CVE-2026-26943` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-24506.md)
  `CVE-2026-24506` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-23774.md)
  `CVE-2026-23774` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-4048.md)
  `CVE-2026-4048` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3519.md)
  `CVE-2026-3519` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3518.md)
  `CVE-2026-3518` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF](https://agentprime.io/advisories/CVE-2026-3517.md)
  `CVE-2026-3517` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [TeamT5｜ThreatSonar Anti-Ransomware - Privilege Escalation](https://agentprime.io/advisories/CVE-2026-5967.md)
  `CVE-2026-5967` · CVE record: TeamT5 ThreatSonar Anti-Ransomware · CVSS 8.7 High · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [A command injection vulnerability was found in the PPTP VPN Clients on the ADM](https://agentprime.io/advisories/CVE-2026-6644.md)
  `CVE-2026-6644` · CVE record: ASUSTOR Inc. ADM · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Apr 2026 · Tags: Command injection
- [liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection](https://agentprime.io/advisories/CVE-2026-6576.md)
  `CVE-2026-6576` · CVE record: liangliangyy DjangoBlog · CVSS 5.3 Medium · Not analysed yet · Published 19 Apr 2026 · Tags: Other injection, Command injection
- [Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf](https://agentprime.io/advisories/CVE-2026-30898.md)
  `CVE-2026-30898` · CVE record: Apache Software Foundation Apache Airflow · CVSS 8.8 High · Not analysed yet · Published 18 Apr 2026 · Tags: Command injection
- [Amazon EFS CSI Driver has mount option injection via unsanitized volumeHandle and mounttargetip fields](https://agentprime.io/advisories/GHSA-mph4-q2vm-w2pw.md)
  `GHSA-mph4-q2vm-w2pw`, `CVE-2026-6437` · Go `github.com/kubernetes-sigs/aws-efs-csi-driver`: affected `<1.7.8-0.20260416142831-51806c22c575`, fixed in `1.7.8-0.20260416142831-51806c22c575` · CVSS 6.9 Medium · Not analysed yet · Published 18 Apr 2026 · Tags: Command injection
- [PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes](https://agentprime.io/advisories/GHSA-qrr6-mg7r-m243.md)
  `GHSA-qrr6-mg7r-m243`, `CVE-2026-41570`, `PKSA-5jz8-6tcw-pbk4` · Packagist `phpunit/phpunit`: affected `>=12.5.21, <12.5.22 || >=13.1.5, <13.1.6`, fixed in `12.5.22`, `13.1.6` · CVSS 7.8 High · Not analysed yet · Published 18 Apr 2026 · Tags: Command injection, Other injection
- [Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-v38x-c887-992f.md)
  `GHSA-v38x-c887-992f`, `CVE-2026-41265` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Apr 2026 · Tags: Command injection, CWE-184
- [elFinder: Command injection in resize background color parameter when using ImageMagick CLI](https://agentprime.io/advisories/GHSA-8q4h-8crm-5cvc.md)
  `GHSA-8q4h-8crm-5cvc`, `CVE-2026-41247`, `PKSA-2p87-h1j5-yb5n` · Packagist `studio-42/elfinder`: affected `<2.1.67`, fixed in `2.1.67` · CVSS 8.9 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [OpenClaw: Shell-wrapper detection missed env-argv assignment injection forms](https://agentprime.io/advisories/GHSA-j6c7-3h5x-99g9.md)
  `GHSA-j6c7-3h5x-99g9`, `CVE-2026-42435` · npm `openclaw`: affected `>=2026.2.22, <2026.4.12`, fixed in `2026.4.12` · CVSS 8.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection, CWE-184
- [Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration](https://agentprime.io/advisories/GHSA-w5j3-8fcr-h87w.md)
  `GHSA-w5j3-8fcr-h87w`, `CVE-2026-23500`, `PKSA-ncsd-s9tq-7bj2` · Packagist `dolibarr/dolibarr`: affected `<=22.0.4`, no fixed version yet · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [radare2 Command Injection via DWARF Parameter Names](https://agentprime.io/advisories/CVE-2026-40527.md)
  `CVE-2026-40527` · CVE record: radareorg radare2 · CVSS 8.5 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [xrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman](https://agentprime.io/advisories/CVE-2026-33145.md)
  `CVE-2026-33145` · CVE record: neutrinolabs xrdp · CVSS 6.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Anviz CX2 Lite Command Injection](https://agentprime.io/advisories/CVE-2026-35682.md)
  `CVE-2026-35682` · CVE record: Anviz Anviz CX2 Lite Firmware · CVSS 8.8 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Command injection in Veeam Backup and Replication and others](https://agentprime.io/advisories/CVE-2026-21709.md)
  `CVE-2026-21709` · CVE record: Veeam Backup and Replication and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Command injection in JetBrains Junie](https://agentprime.io/advisories/CVE-2026-41153.md)
  `CVE-2026-41153` · CVE record: JetBrains Junie · CVSS 5.8 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-35073.md)
  `CVE-2026-35073` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-35074.md)
  `CVE-2026-35074` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-35072.md)
  `CVE-2026-35072` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Argument injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-35153.md)
  `CVE-2026-35153` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Wavlink WL-WN530H4 internet.cgi snprintf os command injection](https://agentprime.io/advisories/CVE-2026-6483.md)
  `CVE-2026-6483` · CVE record: Wavlink WL-WN530H4 · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-23779.md)
  `CVE-2026-23779` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-23778.md)
  `CVE-2026-23778` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [OS command injection in CubeCart](https://agentprime.io/advisories/CVE-2026-21719.md)
  `CVE-2026-21719` · CVE record: CubeCart Limited CubeCart · CVSS 8.6 High · Not analysed yet · Published 17 Apr 2026 · Tags: Command injection
- [Paperclip: OS Command Injection via Execution Workspace cleanupCommand](https://agentprime.io/advisories/GHSA-vr7g-88fq-vhq3.md)
  `GHSA-vr7g-88fq-vhq3`, `CVE-2026-119713` · npm `@paperclipai/server`: affected `<2026.416.0`, fixed in `2026.416.0` · CVSS 8.7 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [Paperclip: Malicious skills able to exfiltrate and destroy all user data](https://agentprime.io/advisories/GHSA-w8hx-hqjv-vjcq.md)
  `GHSA-w8hx-hqjv-vjcq` · npm `@paperclipai/server`: affected `<2026.416.0`, fixed in `2026.416.0` · CVSS 7.3 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [Paperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution](https://agentprime.io/advisories/GHSA-265w-rf2w-cjh4.md)
  `GHSA-265w-rf2w-cjh4`, `CVE-2026-41208` · npm `@paperclipai/server`: affected `<2026.416.0`, fixed in `2026.416.0` · CVSS 8.8 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [OS command injection in sagredo qmail](https://agentprime.io/advisories/CVE-2026-41113.md)
  `CVE-2026-41113` · CVE record: sagredo qmail · CVSS 8.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [WWBN AVideo: RCE cause by clonesite plugin](https://agentprime.io/advisories/GHSA-xr6f-h4x7-r6qp.md)
  `GHSA-xr6f-h4x7-r6qp`, `CVE-2026-41304`, `PKSA-z3t4-4xbz-b3c9` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 8.9 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [electerm: electerm_install_script_CommandInjection Vulnerability Report](https://agentprime.io/advisories/GHSA-wxw2-rwmh-vr8f.md)
  `GHSA-wxw2-rwmh-vr8f`, `CVE-2026-41500` · npm `electerm`: affected `<3.3.8`, fixed in `3.3.8` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [Flowise: Authenticated RCE Via MCP Adapters](https://agentprime.io/advisories/GHSA-c9gw-hvqq-f33r.md)
  `GHSA-c9gw-hvqq-f33r`, `CVE-2026-40933` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [OS command injection in radare2](https://agentprime.io/advisories/CVE-2026-41015.md)
  `CVE-2026-41015` · CVE record: radare radare2 · CVSS 7.4 High · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [HGiga｜iSherlock - OS Command Injection](https://agentprime.io/advisories/CVE-2026-6349.md)
  `CVE-2026-6349` · CVE record: HGiga iSherlock-base-4.5 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection
- [Renovate affected by remote code execution was possible using the bazel-module or bazelisk managers, when using lockFileMaintenance](https://agentprime.io/advisories/GHSA-5vjq-5jmg-39xq.md)
  `GHSA-5vjq-5jmg-39xq`, `CVE-2026-76226` · npm `renovate`: affected `>=43.65.0, <43.102.11`, fixed in `43.102.11` · CVSS 6.8 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Command injection, Code injection
- [Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20186.md)
  `CVE-2026-20186` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20147.md)
  `CVE-2026-20147` · CVE record: Cisco Cisco Identity Services Engine Software and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [NietThijmen ShoppingCart: Command injection in the connect function](https://agentprime.io/advisories/GHSA-ggmw-mjhv-75rm.md)
  `GHSA-ggmw-mjhv-75rm`, `CVE-2024-53412`, `GO-2026-5398` · Go `github.com/NietThijmen/ShoppingCart`: affected `<=0.0.0-20241101155353-3dd137080276`, no fixed version yet · CVSS 8.4 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Argument injection in Lenovo Software Fix](https://agentprime.io/advisories/CVE-2026-4145.md)
  `CVE-2026-4145` · CVE record: Lenovo Software Fix · CVSS 8.5 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()](https://agentprime.io/advisories/CVE-2026-40499.md)
  `CVE-2026-40499` · CVE record: radareorg radare2 · CVSS 8.4 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.](https://agentprime.io/advisories/CVE-2026-30624.md)
  `CVE-2026-30624` · CVE record · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling.](https://agentprime.io/advisories/CVE-2026-30617.md)
  `CVE-2026-30617` · CVE record · CVSS 8.6 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling.](https://agentprime.io/advisories/CVE-2026-30616.md)
  `CVE-2026-30616` · CVE record · CVSS 7.3 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system.](https://agentprime.io/advisories/CVE-2026-30615.md)
  `CVE-2026-30615` · CVE record · CVSS 8.0 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_submodule.](https://agentprime.io/advisories/CVE-2026-30461.md)
  `CVE-2026-30461` · CVE record · CVSS 8.3 High · Not analysed yet · Published 15 Apr 2026 · Tags: Command injection
- [WWBN AVideo has an incomplete fix for CVE-2026-33502: Command Injection](https://agentprime.io/advisories/GHSA-pq8p-wc4f-vg7j.md)
  `GHSA-pq8p-wc4f-vg7j`, `CVE-2026-41064`, `PKSA-v7bq-jd15-qdrz` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection
- [MCP Server Kubernetes has an Argument Injection in port_forward tool via space-splitting](https://agentprime.io/advisories/GHSA-4xqg-gf5c-ghwq.md)
  `GHSA-4xqg-gf5c-ghwq`, `CVE-2026-39884` · npm `mcp-server-kubernetes`: affected `<3.5.0`, fixed in `3.5.0` · CVSS 8.3 High · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection
- [PowerShell Command Injection in Podman HyperV Machine](https://agentprime.io/advisories/GHSA-hc8w-h2mf-hp59.md)
  `GHSA-hc8w-h2mf-hp59`, `CVE-2026-33414`, `GO-2026-5421` · Go `github.com/containers/podman/v4` and 1 more: affected `>=4.8.0, <=4.9.5`, no fixed version yet · CVSS 4.0 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, Code injection
- [Jellyfin: Potential SSRF + Arbitrary file read via stream argument injection](https://agentprime.io/advisories/CVE-2026-35033.md)
  `CVE-2026-35033` · CVE record: jellyfin jellyfin · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, Broken access control
- [Chamilo LMS has OS Command Injection via export_all_certificates action](https://agentprime.io/advisories/CVE-2026-35196.md)
  `CVE-2026-35196` · CVE record: chamilo chamilo-lms · CVSS 8.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection
- [openITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion](https://agentprime.io/advisories/CVE-2026-24893.md)
  `CVE-2026-24893` · CVE record: openITCOCKPIT openITCOCKPIT · CVSS 8.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-20
- [Composer has a command injection via malicious perforce repository](https://agentprime.io/advisories/GHSA-wg36-wvj6-r67p.md)
  `GHSA-wg36-wvj6-r67p`, `BIT-composer-2026-40176`, `CVE-2026-40176`, `PKSA-6bp1-9hfj-2cgv` · Packagist `composer/composer`: affected `>=1.0.0, <2.2.27 || >=2.3.0, <2.9.6`, fixed in `2.2.27`, `2.9.6` · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-20
- [Composer has a command injection via malicious perforce reference](https://agentprime.io/advisories/GHSA-gqw4-4w2p-838q.md)
  `GHSA-gqw4-4w2p-838q`, `BIT-composer-2026-40261`, `CVE-2026-40261`, `PKSA-t5r2-p5q9-mtpn` · Packagist `composer/composer`: affected `>=1.0.0, <2.2.27 || >=2.3.0, <2.9.6`, fixed in `2.2.27`, `2.9.6` · CVSS 8.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Command injection, CWE-20

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA0LTE0VDIwOjAxOjQyLjAwMDAwMFoiLCJHSFNBLWdxdzQtNHcycC04MzhxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA0LTIwVDE5OjU2OjMyLjUyMTAwMFoiLCJDVkUtMjAyNi0zMjMxMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA0LTIwVDE5OjU2OjMyLjUyMTAwMFoiLCJDVkUtMjAyNi0zMjMxMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.