# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Visual Studio Code Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41613.md)
  `CVE-2026-41613` · CVE record: Microsoft Visual Studio Code · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Authentication bypass
- [Visual Studio Code Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41611.md)
  `CVE-2026-41611` · CVE record: Microsoft Visual Studio Code · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Cross-site scripting (XSS)
- [OS command injection in Fortinet FortiAP and others](https://agentprime.io/advisories/CVE-2025-53870.md)
  `CVE-2025-53870` · CVE record: Fortinet FortiAP and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in Fortinet FortiAP-U and others](https://agentprime.io/advisories/CVE-2025-53680.md)
  `CVE-2025-53680` · CVE record: Fortinet FortiAP-U and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Argument injection in Fortinet FortiDeceptor](https://agentprime.io/advisories/CVE-2026-25690.md)
  `CVE-2026-25690` · CVE record: Fortinet FortiDeceptor · CVSS 4.0 Medium · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [JunoClaw: plugin-shell shell-metacharacter injection via shell wrapper](https://agentprime.io/advisories/CVE-2026-43990.md)
  `CVE-2026-43990` · CVE record: Dragonmonk111 junoclaw · CVSS 8.4 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [JunoClaw: plugin-shell shell-injection bypass via substring blocklist](https://agentprime.io/advisories/CVE-2026-43991.md)
  `CVE-2026-43991` · CVE record: Dragonmonk111 junoclaw · CVSS 8.4 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, CWE-184
- [Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via \`found-action\`](https://agentprime.io/advisories/GHSA-v25v-m36w-jp4h.md)
  `GHSA-v25v-m36w-jp4h`, `CVE-2026-45087`, `GO-2026-5649` · Go `github.com/hahwul/dalfox/v2`: affected `<2.13.0`, fixed in `2.13.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Authentication bypass, CWE-15
- [protobuf.js is Vulnerable to OS Command Injection in the CLI](https://agentprime.io/advisories/GHSA-f84p-cvgm-xgjj.md)
  `GHSA-f84p-cvgm-xgjj`, `CVE-2026-42290` · npm `protobufjs-cli`: affected `<1.2.1 || >=2.0.0, <2.0.2`, fixed in `1.2.1`, `2.0.2` · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in ivanti Virtual Traffic Manager](https://agentprime.io/advisories/CVE-2026-8051.md)
  `CVE-2026-8051` · CVE record: ivanti Virtual Traffic Manager · CVSS 7.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in Dell PowerScale InsightIQ](https://agentprime.io/advisories/CVE-2026-35071.md)
  `CVE-2026-35071` · CVE record: Dell PowerScale InsightIQ · CVSS 8.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in Siemens RUGGEDCOM ROX MX5000 and others](https://agentprime.io/advisories/CVE-2025-40949.md)
  `CVE-2025-40949` · CVE record: Siemens RUGGEDCOM ROX MX5000 and 4 more · CVSS 8.9 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Argument injection in Siemens RUGGEDCOM ROX MX5000 and others](https://agentprime.io/advisories/CVE-2025-40948.md)
  `CVE-2025-40948` · CVE record: Siemens RUGGEDCOM ROX MX5000 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in Siemens RUGGEDCOM ROX MX5000 and others](https://agentprime.io/advisories/CVE-2025-40947.md)
  `CVE-2025-40947` · CVE record: Siemens RUGGEDCOM ROX MX5000 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS command injection in Zyxel WRE6505 v2 firmware](https://agentprime.io/advisories/CVE-2026-7256.md)
  `CVE-2026-7256` · CVE record: Zyxel WRE6505 v2 firmware · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform](https://agentprime.io/advisories/CVE-2026-40135.md)
  `CVE-2026-40135` · CVE record: SAP_SE SAP NetWeaver Application Server for ABAP and ABAP Platform · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [OS Command Injection Vulnerability in SAP Forecasting & Replenishment](https://agentprime.io/advisories/CVE-2026-34259.md)
  `CVE-2026-34259` · CVE record: SAP_SE SAP Forecasting & Replenishment · CVSS 8.2 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [Local privilege escalation to SYSTEM in Cribl Edge for Windows](https://agentprime.io/advisories/CVE-2026-45393.md)
  `CVE-2026-45393` · CVE record: Cribl Cribl Edge · CVSS 8.5 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Broken access control, CWE-20
- [Local privilege escalation in Cribl Edge for Linux](https://agentprime.io/advisories/CVE-2026-45391.md)
  `CVE-2026-45391` · CVE record: Cribl Cribl Edge · CVSS 8.5 High · Not analysed yet · Published 12 May 2026 · Tags: Command injection, CWE-20
- [The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).](https://agentprime.io/advisories/CVE-2026-31230.md)
  `CVE-2026-31230` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Command injection, Code injection
- [The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025-58-24) contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities.](https://agentprime.io/advisories/CVE-2026-31226.md)
  `CVE-2026-31226` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Command injection
- [D-Link DIR-816 portForward command injection](https://agentprime.io/advisories/CVE-2026-8346.md)
  `CVE-2026-8346` · CVE record: D-Link DIR-816 · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Other injection, Command injection
- [D-Link DIR-816 singlePortForward sub_445E7C command injection](https://agentprime.io/advisories/CVE-2026-8345.md)
  `CVE-2026-8345` · CVE record: D-Link DIR-816 · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Other injection, Command injection
- [D-Link DIR-816 formDMZ.cgi sub_445E7C command injection](https://agentprime.io/advisories/CVE-2026-8344.md)
  `CVE-2026-8344` · CVE record: D-Link DIR-816 · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Other injection, Command injection
- [automagik-genie has a command injection vulnerability](https://agentprime.io/advisories/GHSA-64vr-4gr2-m642.md)
  `GHSA-64vr-4gr2-m642`, `CVE-2026-30635` · npm `automagik-genie`: affected `=2.5.27`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [pgAdmin 4: OS command injection vulnerability in Import/Export query export](https://agentprime.io/advisories/GHSA-j74f-g7vx-fh4x.md)
  `GHSA-j74f-g7vx-fh4x`, `CVE-2026-7816`, `PYSEC-2026-2870` · PyPI `pgadmin4`: affected `<9.15`, fixed in `9.15` · CVSS 8.7 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection, SQL injection
- [GPT-Pilot contains a command injection vulnerability in the Executor.run() method](https://agentprime.io/advisories/GHSA-m85w-whwh-qvfx.md)
  `GHSA-m85w-whwh-qvfx`, `CVE-2026-31246`, `PYSEC-2026-2501` · PyPI `gpt-pilot`: affected `<=0.0.10`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [WebdriverIO BrowserStack Service has a Command Injection issue](https://agentprime.io/advisories/GHSA-5c46-x3qw-q7j7.md)
  `GHSA-5c46-x3qw-q7j7`, `CVE-2026-25244` · npm `@wdio/browserstack-service`: affected `<9.24.0`, fixed in `9.24.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Dockerfile command injection via envs\[\*\].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)](https://agentprime.io/advisories/GHSA-w2pm-x38x-jp44.md)
  `GHSA-w2pm-x38x-jp44`, `CVE-2026-44346`, `PYSEC-2026-190` · PyPI `bentoml`: affected `<1.4.39`, fixed in `1.4.39` · CVSS 8.8 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection, Code injection
- [BentoML Dockerfile command injection via docker.base_image (sister of pending GHSA-w2pm-x38x-jp44 / CVE-2026-33744 / CVE-2026-35043)](https://agentprime.io/advisories/GHSA-78f9-r8mh-4xm2.md)
  `GHSA-78f9-r8mh-4xm2`, `CVE-2026-44345`, `PYSEC-2026-189` · PyPI `bentoml`: affected `<1.4.39`, fixed in `1.4.39` · CVSS 8.8 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui](https://agentprime.io/advisories/CVE-2026-4802.md)
  `CVE-2026-4802` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection](https://agentprime.io/advisories/CVE-2026-8273.md)
  `CVE-2026-8273` · CVE record: D-Link DNS-320 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [D-Link DNS-320 webfile_mgr.cgi chown os command injection](https://agentprime.io/advisories/CVE-2026-8272.md)
  `CVE-2026-8272` · CVE record: D-Link DNS-320 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection](https://agentprime.io/advisories/CVE-2026-8271.md)
  `CVE-2026-8271` · CVE record: D-Link DNS-320 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Tenda AC6 httpd getLogFile get_log_file os command injection](https://agentprime.io/advisories/CVE-2026-8265.md)
  `CVE-2026-8265` · CVE record: Tenda AC6 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Tenda AC6 httpd WifiApScan formWifiApScan os command injection](https://agentprime.io/advisories/CVE-2026-8264.md)
  `CVE-2026-8264` · CVE record: Tenda AC6 · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection](https://agentprime.io/advisories/CVE-2026-8263.md)
  `CVE-2026-8263` · CVE record: Tenda AC6 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [Tenda AC6 httpd telnet os command injection](https://agentprime.io/advisories/CVE-2026-8259.md)
  `CVE-2026-8259` · CVE record: Tenda AC6 · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd.](https://agentprime.io/advisories/CVE-2026-36983.md)
  `CVE-2026-36983` · CVE record · CVSS 7.3 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection.](https://agentprime.io/advisories/CVE-2026-36734.md)
  `CVE-2026-36734` · CVE record · CVSS 8.8 High · Not analysed yet · Published 11 May 2026 · Tags: Command injection
- [8421bit MiniClaw System kernel.ts resolveSkillScriptPath os command injection](https://agentprime.io/advisories/CVE-2026-8235.md)
  `CVE-2026-8235` · CVE record: 8421bit MiniClaw · CVSS 5.1 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Wavlink NU516U1 login.cgi sys_login1 os command injection](https://agentprime.io/advisories/CVE-2026-8230.md)
  `CVE-2026-8230` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Wavlink NU516U1 wireless.cgi WifiBasic os command injection](https://agentprime.io/advisories/CVE-2026-8229.md)
  `CVE-2026-8229` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Wavlink NU516U1 wireless.cgi advance os command injection](https://agentprime.io/advisories/CVE-2026-8228.md)
  `CVE-2026-8228` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Wavlink NU516U1 adm.cgi wzdapMesh os command injection](https://agentprime.io/advisories/CVE-2026-8227.md)
  `CVE-2026-8227` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection](https://agentprime.io/advisories/CVE-2026-8217.md)
  `CVE-2026-8217` · CVE record: Industrial Application Software IAS Canias ERP · CVSS 5.3 Medium · Not analysed yet · Published 10 May 2026 · Tags: Command injection
- [Argument injection in Hex-Rays IDA](https://agentprime.io/advisories/CVE-2026-45181.md)
  `CVE-2026-45181` · CVE record: Hex-Rays IDA · CVSS 6.5 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [aandrew-me tgpt Update helper.go helper.Update command injection](https://agentprime.io/advisories/CVE-2026-8210.md)
  `CVE-2026-8210` · CVE record: aandrew-me tgpt · CVSS 4.8 Medium · Not analysed yet · Published 9 May 2026 · Tags: Other injection, Command injection
- [Wavlink NU516U1 adm.cgi wzdap os command injection](https://agentprime.io/advisories/CVE-2026-8192.md)
  `CVE-2026-8192` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [Wavlink NU516U1 adm.cgi wifi_region os command injection](https://agentprime.io/advisories/CVE-2026-8191.md)
  `CVE-2026-8191` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [Wavlink NU516U1 adm.cgi wan os command injection](https://agentprime.io/advisories/CVE-2026-8190.md)
  `CVE-2026-8190` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [Wavlink NU516U1 adm.cgi wzdrepeater os command injection](https://agentprime.io/advisories/CVE-2026-8189.md)
  `CVE-2026-8189` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [Wavlink NU516U1 adm.cgi change_wifi_password os command injection](https://agentprime.io/advisories/CVE-2026-8188.md)
  `CVE-2026-8188` · CVE record: Wavlink NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [OS command injection in Hikvision DS-3E1310P-SI and others](https://agentprime.io/advisories/CVE-2026-3828.md)
  `CVE-2026-3828` · CVE record: Hikvision DS-3E1310P-SI and 2 more · CVSS 7.2 High · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [@profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module](https://agentprime.io/advisories/GHSA-v6wj-c83f-v46x.md)
  `GHSA-v6wj-c83f-v46x` · npm `@profullstack/mcp-server`: affected `<=1.4.12`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 May 2026 · Tags: Command injection
- [Termix: OS Command Injection in Docker Container Management Endpoints](https://agentprime.io/advisories/CVE-2026-42454.md)
  `CVE-2026-42454` · CVE record: Termix-SSH Termix · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass](https://agentprime.io/advisories/CVE-2026-42453.md)
  `CVE-2026-42453` · CVE record: Termix-SSH Termix · CVSS 8.7 High · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Vim: OS Command Injection via 'path' completion](https://agentprime.io/advisories/CVE-2026-44656.md)
  `CVE-2026-44656` · CVE record: vim vim · CVSS 4.6 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Vim: OS Command Injection in netrw](https://agentprime.io/advisories/CVE-2026-42307.md)
  `CVE-2026-42307` · CVE record: vim vim · CVSS 4.4 Medium · Not analysed yet · Published 8 May 2026 · Tags: Command injection
- [Electerm Security Vulnerability: RCE via malicious SSH server filename in openFileWithEditor](https://agentprime.io/advisories/GHSA-q4p8-8j9m-8hxj.md)
  `GHSA-q4p8-8j9m-8hxj`, `CVE-2026-43943` · npm `electerm`: affected `<3.7.9`, fixed in `3.7.9` · CVSS 7.8 High · Not analysed yet · Published 8 May 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA1LTA4VDE4OjQzOjUyLjAwMDAwMFoiLCJHSFNBLXE0cDgtOGo5bS04aHhqIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA1LTEyVDE2OjU5OjM3LjMzMDAwMFoiLCJDVkUtMjAyNi00Mjg5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA1LTEyVDE2OjU5OjM3LjMzMDAwMFoiLCJDVkUtMjAyNi00Mjg5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.