# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click](https://agentprime.io/advisories/GHSA-fwf6-j56g-m97c.md)
  `GHSA-fwf6-j56g-m97c`, `CVE-2026-43941` · npm `electerm`: affected `<=3.8.15`, no fixed version yet · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Command injection, Open redirect
- [DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi](https://agentprime.io/advisories/CVE-2022-50994.md)
  `CVE-2022-50994` · CVE record: DrayTek Vigor 2960 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Command injection in Dashboard Server interface](https://agentprime.io/advisories/CVE-2026-8153.md)
  `CVE-2026-8153` · CVE record: Universal Robots PolyScope 5 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.](https://agentprime.io/advisories/CVE-2025-67888.md)
  `CVE-2025-67888` · CVE record · CVSS 7.3 High · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on the server via a crafted build parameter.](https://agentprime.io/advisories/CVE-2024-45257.md)
  `CVE-2024-45257` · CVE record · CVSS 7.3 High · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [/cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated users to execute arbitrary commands as root via a POST request that carries a serverName parameter.](https://agentprime.io/advisories/CVE-2024-30167.md)
  `CVE-2024-30167` · CVE record · CVSS 6.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported.](https://agentprime.io/advisories/CVE-2023-47268.md)
  `CVE-2023-47268` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.](https://agentprime.io/advisories/CVE-2022-45899.md)
  `CVE-2022-45899` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [8421bit MiniClaw kernel.ts executeCognitivePulse os command injection](https://agentprime.io/advisories/CVE-2026-8112.md)
  `CVE-2026-8112` · CVE record: 8421bit MiniClaw · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [Azure Cloud Shell Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-35428.md)
  `CVE-2026-35428` · CVE record: Microsoft Azure Cloud Shell · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-33111.md)
  `CVE-2026-33111` · CVE record: Microsoft Copilot Chat (Microsoft Edge) · CVSS 7.5 High · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [node-ts-ocr is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js](https://agentprime.io/advisories/GHSA-8jh2-3mw6-6pfm.md)
  `GHSA-8jh2-3mw6-6pfm`, `CVE-2025-63705` · npm `node-ts-ocr`: affected `=1.0.15`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28](https://agentprime.io/advisories/CVE-2025-9661.md)
  `CVE-2025-9661` · CVE record: Hitachi Hitachi Virtual Storage Platform One Block 23 and 3 more · CVSS 8.1 High · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [Amazon ECS Container Agent (Windows) is vulnerable to Information Disclosure](https://agentprime.io/advisories/GHSA-fc67-c4hg-q653.md)
  `GHSA-fc67-c4hg-q653`, `CVE-2026-7461`, `GO-2026-5353` · Go `github.com/aws/amazon-ecs-agent`: affected `>=1.47.0, <1.103.0`, fixed in `1.103.0` · CVSS 7.5 High · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [Gotenberg has Unauthenticated RCE via ExifTool Metadata Key Injection](https://agentprime.io/advisories/GHSA-rqgh-gxv4-6657.md)
  `GHSA-rqgh-gxv4-6657`, `CVE-2026-42589`, `GO-2026-5636` · Go `github.com/gotenberg/gotenberg/v8`: affected `=8.29.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Command injection
- [Cisco IoT Field Network Director Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20169.md)
  `CVE-2026-20169` · CVE record: Cisco Cisco IoT Field Network Director (IoT-FND) · CVSS 6.4 Medium · Not analysed yet · Published 6 May 2026 · Tags: Command injection
- [HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability](https://agentprime.io/advisories/CVE-2025-31951.md)
  `CVE-2025-31951` · CVE record: HCL BigFix RunBookAI · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: Command injection, CWE-351, CWE-451
- [Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass](https://agentprime.io/advisories/GHSA-vj3m-2g9h-vm4p.md)
  `GHSA-vj3m-2g9h-vm4p`, `CVE-2026-56700`, `PKSA-vnvp-8nvk-g8ck` · Packagist `getgrav/grav`: affected `<2.0.0-beta.2`, fixed in `2.0.0-beta.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Command injection, Insecure deserialization
- [@evomap/evolver's validator sandbox allowlist permits \`npm\`/\`npx\`, yielding RCE from Hub-delivered validation tasks via lifecycle scripts](https://agentprime.io/advisories/GHSA-jxh8-jh77-xh6g.md)
  `GHSA-jxh8-jh77-xh6g` · npm `@evomap/evolver`: affected `<1.70.0-beta.5`, fixed in `1.70.0-beta.5` · CVSS 8.1 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request](https://agentprime.io/advisories/GHSA-37w4-hwhx-4rc4.md)
  `GHSA-37w4-hwhx-4rc4`, `BIT-jupyterlab-2026-42266`, `CVE-2026-42266`, `PYSEC-2026-164` · PyPI `jupyterlab`: affected `>=4.0.0, <4.5.7`, fixed in `4.5.7` · CVSS 8.8 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection, CWE-20, CWE-602
- [exiftool-vendored vulnerable to argument injection via newline characters in tag names](https://agentprime.io/advisories/GHSA-cw26-7653-2rp5.md)
  `GHSA-cw26-7653-2rp5`, `CVE-2026-43893` · npm `exiftool-vendored`: affected `<35.19.0`, fixed in `35.19.0` · CVSS 8.2 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update() Enables Arbitrary Command Execution via .gitmodules](https://agentprime.io/advisories/GHSA-f26g-jm89-4g65.md)
  `GHSA-f26g-jm89-4g65`, `CVE-2026-40034` · crates.io `gix`: affected `>=0.31.0, <0.83.0`, fixed in `0.83.0` · CVSS 7.3 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection, CWE-183, CWE-349, CWE-501
- [LobeHub has a Cross-Site Scripting issue that escalates to Remote Code Execution](https://agentprime.io/advisories/GHSA-xq4x-622m-q8fq.md)
  `GHSA-xq4x-622m-q8fq`, `CVE-2026-42045` · npm `@lobehub/lobehub`: affected `<=2.1.26`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 5 May 2026 · Tags: Command injection, Cross-site scripting (XSS)
- [Hidden Console Command](https://agentprime.io/advisories/CVE-2026-7865.md)
  `CVE-2026-7865` · CVE record: Crestron Electronics Touchpanels (x60/x70) · CVSS 7.4 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection](https://agentprime.io/advisories/CVE-2026-7833.md)
  `CVE-2026-7833` · CVE record: EFM ipTIME C200 · CVSS 8.6 High · Not analysed yet · Published 5 May 2026 · Tags: Other injection, Command injection
- [Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection](https://agentprime.io/advisories/CVE-2026-7823.md)
  `CVE-2026-7823` · CVE record: Totolink A8000RU · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [54yyyu code-mcp MCP Tool server.py git_operation command injection](https://agentprime.io/advisories/CVE-2026-7812.md)
  `CVE-2026-7812` · CVE record: 54yyyu code-mcp · CVSS 6.9 Medium · Not analysed yet · Published 5 May 2026 · Tags: Other injection, Command injection
- [The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint.](https://agentprime.io/advisories/CVE-2026-36356.md)
  `CVE-2026-36356` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.20 · Not analysed yet · Published 5 May 2026 · Tags: Command injection, Authentication bypass
- [OS command injection vulnerability in the traceroute diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R0A, or 3GN802…](https://agentprime.io/advisories/CVE-2026-31196.md)
  `CVE-2026-31196` · CVE record · CVSS 8.8 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [OS command injection vulnerability in the ping diagnostic handler in /bin/httpd_clientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R0A, or 3GN8020803R0…](https://agentprime.io/advisories/CVE-2026-31195.md)
  `CVE-2026-31195` · CVE record · CVSS 8.8 High · Not analysed yet · Published 5 May 2026 · Tags: Command injection
- [A-G-U-P-T-A wireshark-mcp pyshark_mcp.py quick_capture os command injection](https://agentprime.io/advisories/CVE-2026-7785.md)
  `CVE-2026-7785` · CVE record: A-G-U-P-T-A wireshark-mcp · CVSS 6.9 Medium · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [net-imap vulnerable to command Injection via "raw" arguments to multiple commands](https://agentprime.io/advisories/GHSA-hm49-wcqc-g2xg.md)
  `GHSA-hm49-wcqc-g2xg`, `CVE-2026-42257` · RubyGems `net-imap`: affected `<0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4`, fixed in `0.4.24`, `0.5.14`, `0.6.4` · CVSS 5.8 Medium · Not analysed yet · Published 4 May 2026 · Tags: Command injection, Other injection
- [net-imap vulnerable to command Injection via unvalidated Symbol inputs](https://agentprime.io/advisories/GHSA-75xq-5h9v-w6px.md)
  `GHSA-75xq-5h9v-w6px`, `CVE-2026-42258` · RubyGems `net-imap`: affected `<0.4.24 || >=0.5.0, <0.5.14 || >=0.6.0, <0.6.4`, fixed in `0.4.24`, `0.5.14`, `0.6.4` · CVSS 5.8 Medium · Not analysed yet · Published 4 May 2026 · Tags: Command injection, Other injection
- [ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView](https://agentprime.io/advisories/GHSA-3h23-7824-pj8r.md)
  `GHSA-3h23-7824-pj8r`, `CVE-2026-42601`, `PYSEC-2026-283` · PyPI `archivebox`: affected `<=0.8.6rc0`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [WDR201A WiFi Extender OS Command Injection via firewall.cgi](https://agentprime.io/advisories/CVE-2026-41926.md)
  `CVE-2026-41926` · CVE record: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)](https://agentprime.io/advisories/CVE-2026-41925.md)
  `CVE-2026-41925` · CVE record: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [WDR201A WiFi Extender OS Command Injection via makeRequest.cgi](https://agentprime.io/advisories/CVE-2026-41924.md)
  `CVE-2026-41924` · CVE record: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [WDR201A WiFi Extender OS Command Injection via internet.cgi](https://agentprime.io/advisories/CVE-2026-41923.md)
  `CVE-2026-41923` · CVE record: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [WDR201A WiFi Extender OS Command Injection via wireless.cgi](https://agentprime.io/advisories/CVE-2026-41922.md)
  `CVE-2026-41922` · CVE record: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [Shell command injection in 3onedata GW1101-1D(RS-485)-TB-P modbus gateway](https://agentprime.io/advisories/CVE-2025-13605.md)
  `CVE-2025-13605` · CVE record: 3onedata GW1101-1D(RS-485)-TB-P · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [Prefect Git Argument Injection in GitRepository Pull Steps](https://agentprime.io/advisories/GHSA-6rcx-55r6-jx65.md)
  `GHSA-6rcx-55r6-jx65`, `CVE-2026-7725`, `PYSEC-2026-2955` · PyPI `prefect`: affected `<3.6.25.dev7`, fixed in `3.6.25.dev7` · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Other injection, Command injection
- [privsim mcp-test-runner MCP index.ts child_process.spawn os command injection](https://agentprime.io/advisories/CVE-2026-7730.md)
  `CVE-2026-7730` · CVE record: privsim mcp-test-runner · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [Totolink WA300 cstecgi.cgi NTPSyncWithHost command injection](https://agentprime.io/advisories/CVE-2026-7721.md)
  `CVE-2026-7721` · CVE record: Totolink WA300 · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Other injection, Command injection
- [Totolink WA300 POST Request cstecgi.cgi setLanguageCfg command injection](https://agentprime.io/advisories/CVE-2026-7720.md)
  `CVE-2026-7720` · CVE record: Totolink WA300 · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Other injection, Command injection
- [Totolink WA300 POST Request cstecgi.cgi setWebWlanIdx command injection](https://agentprime.io/advisories/CVE-2026-7718.md)
  `CVE-2026-7718` · CVE record: Totolink WA300 · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Other injection, Command injection
- [GeoVision LPC2011/LPC2211 Web Interface / DdnsSetting.cgi OS command injection vulnerability](https://agentprime.io/advisories/CVE-2026-42364.md)
  `CVE-2026-42364` · CVE record: GeoVision Inc. GV-LPC2011/LPC2211 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 May 2026 · Tags: Command injection
- [An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep function…](https://agentprime.io/advisories/CVE-2026-36365.md)
  `CVE-2026-36365` · CVE record · CVSS 7.8 High · Not analysed yet · Published 4 May 2026 · Tags: Command injection, Code injection
- [JD Cloud JDCOS Service jdcap set_iptv_info command injection](https://agentprime.io/advisories/CVE-2026-7705.md)
  `CVE-2026-7705` · CVE record: JD Cloud JDCOS · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection](https://agentprime.io/advisories/CVE-2026-7698.md)
  `CVE-2026-7698` · CVE record: Tiandy Easy7 Integrated Management Platform · CVSS 6.9 Medium · Not analysed yet · Published 3 May 2026 · Tags: Command injection
- [Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection](https://agentprime.io/advisories/CVE-2026-7692.md)
  `CVE-2026-7692` · CVE record: Wavlink WL-WN570HA1 · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection](https://agentprime.io/advisories/CVE-2026-7691.md)
  `CVE-2026-7691` · CVE record: Wavlink WL-WN570HA1 · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection](https://agentprime.io/advisories/CVE-2026-7690.md)
  `CVE-2026-7690` · CVE record: Wavlink WL-WN570HA1 · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details command injection](https://agentprime.io/advisories/CVE-2026-7687.md)
  `CVE-2026-7687` · CVE record: langflow-ai langflow · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [Edimax BR-6428nC Web setWAN command injection](https://agentprime.io/advisories/CVE-2026-7683.md)
  `CVE-2026-7683` · CVE record: Edimax BR-6428nC · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [Edimax BR-6208AC L2TP Mode setWAN command injection](https://agentprime.io/advisories/CVE-2026-7682.md)
  `CVE-2026-7682` · CVE record: Edimax BR-6208AC · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Other injection, Command injection
- [r-huijts mcp-server-rijksmuseum MCP index.ts open_image_in_browser os command injection](https://agentprime.io/advisories/CVE-2026-7653.md)
  `CVE-2026-7653` · CVE record: r-huijts mcp-server-rijksmuseum · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Command injection
- [pskill9 website-downloader MCP index.ts download_website os command injection](https://agentprime.io/advisories/CVE-2026-7642.md)
  `CVE-2026-7642` · CVE record: pskill9 website-downloader · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Command injection
- [kleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection](https://agentprime.io/advisories/CVE-2026-7629.md)
  `CVE-2026-7629` · CVE record: kleneway awesome-cursor-mpc-server · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Other injection, Command injection
- [crazyrabbitLTC mcp-code-review-server RepoMix repomix.ts executeRepomix command injection](https://agentprime.io/advisories/CVE-2026-7628.md)
  `CVE-2026-7628` · CVE record: crazyrabbitLTC mcp-code-review-server · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Other injection, Command injection
- [TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection](https://agentprime.io/advisories/CVE-2026-7609.md)
  `CVE-2026-7609` · CVE record: TRENDnet TEW-821DAP · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA1LTAyVDA5OjAwOjE4Ljg2MzAwMFoiLCJDVkUtMjAyNi03NjA5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA1LTA4VDE4OjQzOjUyLjAwMDAwMFoiLCJHSFNBLXE0cDgtOGo5bS04aHhqIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA1LTA4VDE4OjQzOjUyLjAwMDAwMFoiLCJHSFNBLXE0cDgtOGo5bS04aHhqIl0>. Everything for agents: <https://agentprime.io/llms.txt>.