# Command injection. Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [ImageMagick: Policy Bypass can read disallowed files via symlink](https://agentprime.io/advisories/GHSA-xcjm-wqff-m669.md) `GHSA-xcjm-wqff-m669`, `CVE-2026-49219` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.14.0`, fixed in `14.14.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Path traversal, Command injection, Information disclosure, Broken access control - [Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename](https://agentprime.io/advisories/CVE-2026-55895.md) `CVE-2026-55895` · CVE record: vim vim · CVSS 5.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection, Code injection - [Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction](https://agentprime.io/advisories/CVE-2026-57453.md) `CVE-2026-57453` · CVE record: vim vim · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS command injection in Schneider Electric PowerLogic™ P7](https://agentprime.io/advisories/CVE-2026-9717.md) `CVE-2026-9717` · CVE record: Schneider Electric PowerLogic™ P7 · CVSS 8.6 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS command injection in Dell Display and Peripheral Manager](https://agentprime.io/advisories/CVE-2026-46735.md) `CVE-2026-46735` · CVE record: Dell Display and Peripheral Manager · CVSS 7.8 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin](https://agentprime.io/advisories/CVE-2026-8658.md) `CVE-2026-8658` · CVE record: Rapid7 InsightConnect Tcpdump Plugin · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Traceroute Plugin](https://agentprime.io/advisories/CVE-2026-8666.md) `CVE-2026-8666` · CVE record: Rapid7 InsightConnect Traceroute Plugin · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect AWK Plugin](https://agentprime.io/advisories/CVE-2026-8592.md) `CVE-2026-8592` · CVE record: Rapid7 InsightConnect AWK Plugin · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Finger Plugin](https://agentprime.io/advisories/CVE-2026-8664.md) `CVE-2026-8664` · CVE record: Rapid7 InsightConnect Finger Plugin · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Translate Plugin](https://agentprime.io/advisories/CVE-2026-8665.md) `CVE-2026-8665` · CVE record: Rapid7 InsightConnect TR Plugin · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Ping Plugin](https://agentprime.io/advisories/CVE-2026-8660.md) `CVE-2026-8660` · CVE record: Rapid7 InsightConnect Ping Plugin · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.](https://agentprime.io/advisories/CVE-2026-9155.md) `CVE-2026-9155` · CVE record: Rapid7 InsightConnect Sed Plugin · CVSS 8.8 High · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect SQLmap Plugin](https://agentprime.io/advisories/CVE-2026-8659.md) `CVE-2026-8659` · CVE record: Rapid7 InsightConnect SQLmap Plugin · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Command injection - [OS Command Injection in Rapid7 InsightConnect RPM Plugin](https://agentprime.io/advisories/CVE-2026-8663.md) `CVE-2026-8663` · CVE record: Rapid7 InsightConnect RPM Plugin · CVSS 6.0 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Cacti: Command Injection via escape_command() no-op in RRDtool execution](https://agentprime.io/advisories/CVE-2026-40079.md) `CVE-2026-40079` · CVE record: Cacti cacti · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-9787.md) `CVE-2026-9787` · CVE record: Quest NetVault Backup · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Cacti: Unauthenticated RCE on Graph Image](https://agentprime.io/advisories/CVE-2026-39938.md) `CVE-2026-39938` · CVE record: Cacti cacti · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Path traversal, Command injection - [Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-9773.md) `CVE-2026-9773` · CVE record: Unraid Unraid · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-9772.md) `CVE-2026-9772` · CVE record: Unraid Unraid · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Jellyfin: Potential FFmpeg argument injection via unescaped subtitle file path](https://agentprime.io/advisories/CVE-2026-48793.md) `CVE-2026-48793` · CVE record: jellyfin jellyfin · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Warp branch selector command injection via Git branch names](https://agentprime.io/advisories/CVE-2026-48719.md) `CVE-2026-48719` · CVE record: warpdotdev warp · CVSS 8.0 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Warp: Linux external editor command injection](https://agentprime.io/advisories/CVE-2026-48731.md) `CVE-2026-48731` · CVE record: warpdotdev warp · CVSS 7.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Warp: Remote SSH cwd can lead to unauthorized remote command execution](https://agentprime.io/advisories/CVE-2026-48732.md) `CVE-2026-48732` · CVE record: warpdotdev warp · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Warp: DCS lifecycle hook spoofing can alter terminal session metadata](https://agentprime.io/advisories/CVE-2026-54686.md) `CVE-2026-54686` · CVE record: warpdotdev warp · CVSS 4.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Warp: OS command injection when opening terminal links from WSL](https://agentprime.io/advisories/CVE-2026-54699.md) `CVE-2026-54699` · CVE record: warpdotdev warp · CVSS 7.7 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection, CWE-116 - [Warp: Command Injection via Warp code search tool arguments](https://agentprime.io/advisories/CVE-2026-48703.md) `CVE-2026-48703` · CVE record: warpdotdev warp · CVSS 7.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Jenkins Git client Plugin has an OS command injection vulnerability on agents](https://agentprime.io/advisories/GHSA-wp5x-hrrw-6r4g.md) `GHSA-wp5x-hrrw-6r4g`, `CVE-2026-57282` · Maven `org.jenkins-ci.plugins:git-client`: affected `<6.6.1`, fixed in `6.6.1` · CVSS 5.0 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit](https://agentprime.io/advisories/CVE-2026-11968.md) `CVE-2026-11968` · CVE record: TortoiseGit team TortoiseGit · CVSS 5.5 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability](https://agentprime.io/advisories/CVE-2026-12851.md) `CVE-2026-12851` · CVE record: GeoVision Inc. GV-I/O Box 4E · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability](https://agentprime.io/advisories/CVE-2026-12850.md) `CVE-2026-12850` · CVE record: GeoVision Inc. GV-I/O Box 4E · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability](https://agentprime.io/advisories/CVE-2026-12849.md) `CVE-2026-12849` · CVE record: GeoVision Inc. GV-I/O Box 4E · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability](https://agentprime.io/advisories/CVE-2026-12486.md) `CVE-2026-12486` · CVE record: GeoVision Inc. GV-I/O Box 4E · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jun 2026 · Tags: Command injection - [@rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String](https://agentprime.io/advisories/CVE-2026-55249.md) `CVE-2026-55249` · CVE record: rtk-ai rtk · CVSS 6.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection - [Mise's local credential_command executes untrusted config](https://agentprime.io/advisories/GHSA-29hf-rm4x-xxph.md) `GHSA-29hf-rm4x-xxph`, `CVE-2026-55448` · crates.io `mise`: affected `>=2026.3.15, <2026.6.4`, fixed in `2026.6.4` · CVSS 6.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection - [Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository](https://agentprime.io/advisories/GHSA-77g9-363w-rccq.md) `GHSA-77g9-363w-rccq`, `CVE-2026-55441` · crates.io `mise`: affected `<2026.6.4`, fixed in `2026.6.4` · CVSS 8.6 High · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection, Code injection, Broken access control - [AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink](https://agentprime.io/advisories/GHSA-wc3f-xc32-435f.md) `GHSA-wc3f-xc32-435f`, `CVE-2026-55173`, `PKSA-kyny-4znw-msn6` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection - [Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge](https://agentprime.io/advisories/GHSA-qf6p-p7ww-cwr9.md) `GHSA-qf6p-p7ww-cwr9`, `CVE-2026-52806`, `GO-2026-5580` · Go `gogs.io/gogs`: affected `<0.14.3`, fixed in `0.14.3` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection - [Duplicate Advisory: ImageMagick: SVG-to-MVG Command Injection via coders/svg.c](https://agentprime.io/advisories/GHSA-v772-658q-978p.md) `GHSA-v772-658q-978p` · NuGet `Magick.NET-Q16-AnyCPU`: affected `<14.10.3`, fixed in `14.10.3` · CVSS 0.0 None · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection, CWE-116 - [NetComm NF20MESH < R6B032 Authenticated RCE via OS Command Injection](https://agentprime.io/advisories/CVE-2026-35018.md) `CVE-2026-35018` · CVE record: NetComm Wireless Pty Ltd NF20MESH · CVSS 8.7 High · Not analysed yet · Published 23 Jun 2026 · Tags: Command injection - [skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery](https://agentprime.io/advisories/GHSA-74p7-6h78-gw8p.md) `GHSA-74p7-6h78-gw8p` · crates.io `skillctl`: affected `<0.1.3`, fixed in `0.1.3` · No CVSS score · Not analysed yet · Published 22 Jun 2026 · Tags: Path traversal, Command injection, Other injection, Denial of service - [Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py](https://agentprime.io/advisories/GHSA-v5r2-qh84-fjx5.md) `GHSA-v5r2-qh84-fjx5`, `CVE-2026-46606`, `PYSEC-2026-2497` · PyPI `glances`: affected `<4.5.5`, fixed in `4.5.5` · CVSS 7.8 High · Not analysed yet · Published 22 Jun 2026 · Tags: Command injection - [Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers](https://agentprime.io/advisories/CVE-2026-11834.md) `CVE-2026-11834` · CVE record: TP-Link Systems Inc. Archer MR200 v07 and 4 more · CVSS 8.7 High · Not analysed yet · Published 22 Jun 2026 · Tags: Command injection - [coollabsio coolify Image Name os command injection](https://agentprime.io/advisories/CVE-2026-12815.md) `CVE-2026-12815` · CVE record: coollabsio coolify · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Command injection - [Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection](https://agentprime.io/advisories/CVE-2026-12814.md) `CVE-2026-12814` · CVE record: Comfast CF-WR631AX V3 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Command injection - [Edimax BR-6478AC V2 POST Request mp command injection](https://agentprime.io/advisories/CVE-2026-12810.md) `CVE-2026-12810` · CVE record: Edimax BR-6478AC V2 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Other injection, Command injection - [Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection](https://agentprime.io/advisories/CVE-2026-12809.md) `CVE-2026-12809` · CVE record: Edimax BR-6478AC V2 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Other injection, Command injection - [Edimax BR-6478AC V2 POST Request stainfo command injection](https://agentprime.io/advisories/CVE-2026-12808.md) `CVE-2026-12808` · CVE record: Edimax BR-6478AC V2 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Other injection, Command injection - [Edimax BR-6478AC V2 POST Request setWAN command injection](https://agentprime.io/advisories/CVE-2026-12807.md) `CVE-2026-12807` · CVE record: Edimax BR-6478AC V2 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Other injection, Command injection - [@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument](https://agentprime.io/advisories/GHSA-v75r-vx73-82pj.md) `GHSA-v75r-vx73-82pj`, `CVE-2026-55849` · npm `@cyclonedx/cyclonedx-npm`: affected `>=2.1.0, <5.0.0`, fixed in `5.0.0` · CVSS 8.5 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [Microsoft Copilot Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-42895.md) `CVE-2026-42895` · CVE record: Microsoft Microsoft 365 Copilot · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [gin-vue-admin vulnerable to RCE](https://agentprime.io/advisories/CVE-2026-48787.md) `CVE-2026-48787` · CVE record: flipped-aurora gin-vue-admin · CVSS 7.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync](https://agentprime.io/advisories/GHSA-vcv2-r9jh-99m5.md) `GHSA-vcv2-r9jh-99m5`, `CVE-2026-58195` · npm `agentic-flow`: affected `<2.0.14`, fixed in `2.0.14` · CVSS 8.8 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [agent-coderag: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution](https://agentprime.io/advisories/GHSA-wg5p-8h9p-3mr7.md) `GHSA-wg5p-8h9p-3mr7`, `CVE-2026-57586` · PyPI `agent-coderag`: affected `<1.3.1`, fixed in `1.3.1` · CVSS 8.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()](https://agentprime.io/advisories/GHSA-6rfw-mq36-jm8h.md) `GHSA-6rfw-mq36-jm8h`, `CVE-2026-12530`, `PYSEC-2026-2395` · PyPI `bedrock-agentcore`: affected `>=1.1.3, <1.6.1`, fixed in `1.6.1` · CVSS 8.4 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [Authenticated OS Command Injection in Bondix](https://agentprime.io/advisories/CVE-2026-12104.md) `CVE-2026-12104` · CVE record: SIMA GmbH Bondix Server · CVSS 8.6 High · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [Network-AI: Improper Neutralization of Special Elements used in an OS Command](https://agentprime.io/advisories/GHSA-qw6v-5fcf-5666.md) `GHSA-qw6v-5fcf-5666`, `CVE-2026-54051` · npm `network-ai`: affected `<5.9.1`, fixed in `5.9.1` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2026 · Tags: Command injection - [pgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution](https://agentprime.io/advisories/CVE-2026-12045.md) `CVE-2026-12045` · CVE record: pgadmin.org pgAdmin 4 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, SQL injection - [gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)](https://agentprime.io/advisories/GHSA-4h5r-5jm8-jxjm.md) `GHSA-4h5r-5jm8-jxjm`, `CVE-2026-0755` · npm `gemini-mcp-tool`: affected `>=1.1.2, <1.1.6`, fixed in `1.1.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection - [OpenClaw: Shell positional parameters could weaken strict inline-eval checks](https://agentprime.io/advisories/GHSA-5cj2-3jr2-5h77.md) `GHSA-5cj2-3jr2-5h77`, `CVE-2026-53855` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 7.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, Privilege escalation, Broken access control, CWE-184 - [OpenClaw: Exec allowlist could miss side effects from transparent command wrappers](https://agentprime.io/advisories/GHSA-cwpp-5962-q4f6.md) `GHSA-cwpp-5962-q4f6`, `CVE-2026-53848` · npm `openclaw`: affected `<2026.5.26`, fixed in `2026.5.26` · CVSS 2.3 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Command injection, CWE-184 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .