# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [AidanPark openclaw-android Android WebView Bridge JsBridge.kt os command injection](https://agentprime.io/advisories/CVE-2026-15193.md)
  `CVE-2026-15193` · CVE record: AidanPark openclaw-android · CVSS 4.8 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection
- [gpsd gpsprof Command Injection via gnuplot plot title subtype field](https://agentprime.io/advisories/CVE-2026-58459.md)
  `CVE-2026-58459` · CVE record: ntpsec gpsd · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection
- [Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE](https://agentprime.io/advisories/GHSA-v5px-423j-pf7p.md)
  `GHSA-v5px-423j-pf7p`, `CVE-2026-52831`, `GO-2026-5946` · Go `github.com/nuclio/nuclio`: affected `<0.0.0-20260601075854-3356b86a8bfa`, fixed in `0.0.0-20260601075854-3356b86a8bfa` · CVSS 8.0 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [Horde VFS < 3.0.1 OS Command Injection via Horde_Vfs_Smb Driver](https://agentprime.io/advisories/CVE-2026-60102.md)
  `CVE-2026-60102` · CVE record: horde Vfs · CVSS 7.7 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [ToolJet GitHub Actions comment body shell injection exposes deployment secrets](https://agentprime.io/advisories/CVE-2026-54344.md)
  `CVE-2026-54344` · CVE record: ToolJet ToolJet · CVSS 4.7 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [A vulnerability was found in bentoml OpenLLM 0.6.30. This affects the function async_run_command of the file src/openllm/common.py of the component Model Repository Directory Name Handler. Performi...](https://agentprime.io/advisories/PYSEC-2026-2089.md)
  `PYSEC-2026-2089`, `CVE-2026-15035` · PyPI `bentoml`: affected `<=0.6.30`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Other injection, Command injection
- [christopherthielen check-peer-dependencies peerDependencies packageUtils.js shelljs.exec os command injection](https://agentprime.io/advisories/CVE-2026-15033.md)
  `CVE-2026-15033` · CVE record: christopherthielen check-peer-dependencies · CVSS 5.3 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8.](https://agentprime.io/advisories/CVE-2026-24700.md)
  `CVE-2026-24700` · CVE record · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8.](https://agentprime.io/advisories/CVE-2026-24699.md)
  `CVE-2026-24699` · CVE record · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.…](https://agentprime.io/advisories/CVE-2026-24698.md)
  `CVE-2026-24698` · CVE record · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8.](https://agentprime.io/advisories/CVE-2026-24697.md)
  `CVE-2026-24697` · CVE record · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2026 · Tags: Command injection
- [aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address](https://agentprime.io/advisories/GHSA-v3q9-hj7j-63hq.md)
  `GHSA-v3q9-hj7j-63hq`, `CVE-2026-53533`, `PYSEC-2026-2338` · PyPI `aiosmtplib`: affected `<5.1.1`, fixed in `5.1.1` · CVSS 6.9 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection, Other injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-53479.md)
  `CVE-2026-53479` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [EGroupware has Authenticated RCE via Malicious eTemplate Upload](https://agentprime.io/advisories/GHSA-8737-2x9g-xjj7.md)
  `GHSA-8737-2x9g-xjj7`, `CVE-2026-40187`, `PKSA-s1pv-qcq4-r5jv` · Packagist `egroupware/egroupware`: affected `<23.1.20260601 || >=26.0.20251208, <26.4.20260413`, fixed in `23.1.20260601`, `26.4.20260413` · CVSS 8.6 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection, Code injection
- [Coolify: OS Command Injection via Database Credential Fields in Docker Compose Service Commands](https://agentprime.io/advisories/CVE-2026-42201.md)
  `CVE-2026-42201` · CVE record: coollabsio coolify · CVSS 3.3 Low · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Command injection via single-quote breakout in Docker Compose custom commands](https://agentprime.io/advisories/CVE-2026-34158.md)
  `CVE-2026-34158` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Authenticated Remote Code Execution via Command Injection in Database Import Container Name](https://agentprime.io/advisories/CVE-2026-34057.md)
  `CVE-2026-34057` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers](https://agentprime.io/advisories/CVE-2026-42143.md)
  `CVE-2026-42143` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport)](https://agentprime.io/advisories/CVE-2026-34152.md)
  `CVE-2026-34152` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Authenticated Host-Level RCE via Unescaped Database Credentials in Backup Jobs](https://agentprime.io/advisories/CVE-2026-34149.md)
  `CVE-2026-34149` · CVE record: coollabsio coolify · CVSS 3.3 Low · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Host RCE via Sentinel token injection](https://agentprime.io/advisories/CVE-2026-34034.md)
  `CVE-2026-34034` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Command injection via unsanitized persistent storage name in docker volume commands](https://agentprime.io/advisories/CVE-2026-34168.md)
  `CVE-2026-34168` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: OS Command Injection via Unmanaged Container Operations - Remote Code Execution](https://agentprime.io/advisories/CVE-2026-34058.md)
  `CVE-2026-34058` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: Host RCE via Log Drain secret/env command injection](https://agentprime.io/advisories/CVE-2026-34035.md)
  `CVE-2026-34035` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2026 · Tags: Command injection
- [Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container](https://agentprime.io/advisories/CVE-2026-42153.md)
  `CVE-2026-42153` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coolify: Command Injection via unsanitized MongoDB collection names in database backup](https://agentprime.io/advisories/CVE-2026-34049.md)
  `CVE-2026-34049` · CVE record: coollabsio coolify · CVSS 3.3 Low · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coolify: Authenticated Remote Code Execution in GetLogs Livewire Component](https://agentprime.io/advisories/CVE-2026-34599.md)
  `CVE-2026-34599` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coolify: Authenticated RCE via SHELL_SAFE_COMMAND_PATTERN regression → host root](https://agentprime.io/advisories/CVE-2026-42204.md)
  `CVE-2026-42204` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coolify: Command Injection via Unescaped Version String in Docker Build](https://agentprime.io/advisories/CVE-2026-42148.md)
  `CVE-2026-42148` · CVE record: coollabsio coolify · CVSS 3.8 Low · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command](https://agentprime.io/advisories/GHSA-798h-hpph-m24j.md)
  `GHSA-798h-hpph-m24j`, `CVE-2026-55426`, `PYSEC-2026-2594` · PyPI `linuxfabrik-lib`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 7.8 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coolify LocalFileVolume fs_path command injection enables RCE](https://agentprime.io/advisories/CVE-2026-34153.md)
  `CVE-2026-34153` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [Coder vulnerable to SSH config injection via unsanitized server-supplied values in \`coder config-ssh\`](https://agentprime.io/advisories/GHSA-mcqq-fqgf-rxwm.md)
  `GHSA-mcqq-fqgf-rxwm`, `CVE-2026-55427`, `GO-2026-5913` · Go `github.com/coder/coder/v2`: affected `<2.29.17 || >=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2`, fixed in `2.29.17`, `2.32.7`, `2.33.8`, `2.34.2` · CVSS 8.3 High · Not analysed yet · Published 6 Jul 2026 · Tags: Other injection, Command injection
- [Coolify authenticated remote command injection leading to RCE and secret exfiltration](https://agentprime.io/advisories/CVE-2026-34038.md)
  `CVE-2026-34038` · CVE record: coollabsio coolify · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [flyto-core has Unauthenticated Command Execution via HTTP MCP \`execute_module\`](https://agentprime.io/advisories/GHSA-h9f9-h6gm-wc85.md)
  `GHSA-h9f9-h6gm-wc85`, `CVE-2026-55786`, `PYSEC-2026-2482` · PyPI `flyto-core`: affected `>=2.26.2, <2.26.4`, fixed in `2.26.4` · CVSS 8.4 High · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection, Authentication bypass
- [Apache Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer](https://agentprime.io/advisories/GHSA-rpv3-6645-2vqc.md)
  `GHSA-rpv3-6645-2vqc`, `CVE-2026-40047` · Maven `org.apache.camel:camel-docling`: affected `>=4.15.0, <4.18.3`, fixed in `4.18.3` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [react-dev-utils openBrowser permits command injection on macOS](https://agentprime.io/advisories/GHSA-g9g6-gvq9-j4vp.md)
  `GHSA-g9g6-gvq9-j4vp`, `CVE-2026-14802` · npm `react-dev-utils`: affected `<=5.0.1`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Command injection
- [OS command injection in vesta](https://agentprime.io/advisories/CVE-2026-12195.md)
  `CVE-2026-12195` · CVE record: myvesta vesta · CVSS 8.5 High · Not analysed yet · Published 4 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-49813.md)
  `CVE-2026-49813` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-49814.md)
  `CVE-2026-49814` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [Argument Injection in TUBITAK BILGEM's pardus-software](https://agentprime.io/advisories/CVE-2026-14459.md)
  `CVE-2026-14459` · CVE record: TUBITAK BILGEM Software Technologies Research Institute pardus-software · CVSS 8.8 High · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-49815.md)
  `CVE-2026-49815` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-53478.md)
  `CVE-2026-53478` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-26355.md)
  `CVE-2026-26355` · CVE record: Dell PowerProtect Data Domain · CVSS 6.5 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-54483.md)
  `CVE-2026-54483` · CVE record: Dell PowerProtect Data Domain · CVSS 6.7 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Command injection
- [Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments](https://agentprime.io/advisories/GHSA-8w6w-23mq-h8rg.md)
  `GHSA-8w6w-23mq-h8rg`, `CVE-2026-52817`, `PYSEC-2026-2595` · PyPI `linuxfabrik-lib`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 7.0 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [9router: Missing Authorization and OS Command Injection](https://agentprime.io/advisories/GHSA-g6g7-pvmx-m74p.md)
  `GHSA-g6g7-pvmx-m74p`, `CVE-2026-59800` · npm `9router`: affected `<0.4.44`, fixed in `0.4.44` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, Broken access control
- [electerm has Command Injection in File System Operations (rmrf, mv, cp)](https://agentprime.io/advisories/GHSA-v5ff-xmfp-p245.md)
  `GHSA-v5ff-xmfp-p245`, `CVE-2026-49255` · npm `electerm`: affected `<3.11.11`, fixed in `3.11.11` · CVSS 8.8 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [Grackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)](https://agentprime.io/advisories/GHSA-vv65-f55v-xm6g.md)
  `GHSA-vv65-f55v-xm6g` · npm `@grackle-ai/powerline` and 1 more: affected `<=0.132.1`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent](https://agentprime.io/advisories/GHSA-m3cr-vc2j-pm27.md)
  `GHSA-m3cr-vc2j-pm27`, `CVE-2026-44454`, `GO-2026-5897` · Go `github.com/coder/coder` and 1 more: affected `<=0.27.3`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [OpenClaw's POSIX node system.run safe-bin allowlist could be widened by shell expansion](https://agentprime.io/advisories/GHSA-mhq8-78pj-5j79.md)
  `GHSA-mhq8-78pj-5j79`, `CVE-2026-53831` · npm `openclaw`: affected `<2026.5.18`, fixed in `2026.5.18` · CVSS 7.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, Information disclosure, Broken access control, Race condition
- [OpenClaw's marketplace runtime extension metadata could point at unscanned payloads](https://agentprime.io/advisories/GHSA-v6r2-jh58-xx6w.md)
  `GHSA-v6r2-jh58-xx6w`, `CVE-2026-53810` · npm `openclaw`: affected `<2026.5.18`, fixed in `2026.5.18` · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, Code injection, Broken access control, CWE-829
- [OpenClaw: Bundle MCP loopback could miss its exec denylist on session spawn](https://agentprime.io/advisories/GHSA-qh2f-99mv-mrcf.md)
  `GHSA-qh2f-99mv-mrcf`, `CVE-2026-53820` · npm `openclaw`: affected `<2026.5.12`, fixed in `2026.5.12` · CVSS 6.9 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, Broken access control
- [Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php](https://agentprime.io/advisories/CVE-2026-58455.md)
  `CVE-2026-58455` · CVE record: Notifiarr dockwatch · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection, CWE-698
- [obs-service-tar_scm: command injection via mercurial handler](https://agentprime.io/advisories/CVE-2026-56004.md)
  `CVE-2026-56004` · CVE record: openSUSE buildservice · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [luci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter](https://agentprime.io/advisories/CVE-2026-58652.md)
  `CVE-2026-58652` · CVE record: openwrt luci-app-travelmate and 1 more · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [WP Database Backup <= 7.11 - Authenticated (Administrator+) OS Command Injection via 'wp_db_exclude_table' Parameter](https://agentprime.io/advisories/CVE-2026-9834.md)
  `CVE-2026-9834` · CVE record: databasebackup WP Database Backup – Unlimited Database & Files Backup by Backup for WP · CVSS 7.2 High · Not analysed yet · Published 2 Jul 2026 · Tags: Command injection
- [Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp](https://agentprime.io/advisories/CVE-2026-58457.md)
  `CVE-2026-58457` · CVE record: Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Command injection
- [repomix Vulnerable to Command Injection (RCE) via \`--remote-branch\` Argument Injection](https://agentprime.io/advisories/GHSA-9mm9-rqhj-j5mx.md)
  `GHSA-9mm9-rqhj-j5mx`, `CVE-2026-49987` · npm `repomix`: affected `<1.14.1`, fixed in `1.14.1` · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: Command injection
- [Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php](https://agentprime.io/advisories/CVE-2026-34117.md)
  `CVE-2026-34117` · CVE record: guardian language-system · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Command injection
- [Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.php](https://agentprime.io/advisories/CVE-2026-34116.md)
  `CVE-2026-34116` · CVE record: guardian language-system · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA3LTAxVDE2OjIzOjI0Ljc2MDAwMFoiLCJDVkUtMjAyNi0zNDExNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA3LTA5VDE3OjI0OjQ2LjA5ODAwMFoiLCJDVkUtMjAyNi01OTcyMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA3LTA5VDE3OjI0OjQ2LjA5ODAwMFoiLCJDVkUtMjAyNi01OTcyMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.