# Command injection. Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration](https://agentprime.io/advisories/CVE-2026-47751.md) `CVE-2026-47751` · CVE record: anthropics claude-code-action · CVSS 5.3 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection, Information disclosure - [AVideo through 29.0 OS Command Injection via ffmpeg.json.php](https://agentprime.io/advisories/CVE-2026-63305.md) `CVE-2026-63305` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection - [AVideo through 29.0 OS Command Injection via listFFmpegProcesses](https://agentprime.io/advisories/CVE-2026-63304.md) `CVE-2026-63304` · CVE record: WWBN AVideo · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection - [Origin Validation Error in X-Rite MA-T6](https://agentprime.io/advisories/CVE-2023-49900.md) `CVE-2023-49900` · CVE record: X-Rite MA-T6 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection - [GPT Researcher MCP STDIO configuration allows remote command execution](https://agentprime.io/advisories/GHSA-8j86-h8gg-797p.md) `GHSA-8j86-h8gg-797p`, `CVE-2025-65720`, `PYSEC-2026-4219` · PyPI `gpt-researcher`: affected `>=0.14.5, <=0.14.7`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection - [systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux](https://agentprime.io/advisories/GHSA-5xpp-75jx-m839.md) `GHSA-5xpp-75jx-m839`, `CVE-2026-50289` · npm `systeminformation`: affected `<5.31.7`, fixed in `5.31.7` · CVSS 8.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Duplicate Advisory: Command Injection in jsii-diff via npm: package argument](https://agentprime.io/advisories/GHSA-h738-vh6g-q8gh.md) `GHSA-h738-vh6g-q8gh` · npm `jsii-diff`: affected `<1.131.0`, fixed in `1.131.0` · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Wekan: Shell Injection via Avatar Upload](https://agentprime.io/advisories/CVE-2026-52891.md) `CVE-2026-52891` · CVE record: wekan wekan · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [MaaAssistantArknights: PR-title expression injection in release-preparation.yml](https://agentprime.io/advisories/CVE-2026-55576.md) `CVE-2026-55576` · CVE record: MaaAssistantArknights MaaAssistantArknights · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection, Code injection - [9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments](https://agentprime.io/advisories/CVE-2026-62312.md) `CVE-2026-62312` · CVE record: decolua 9router · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [LangBot: Authenticated RCE Via MCP Configuration](https://agentprime.io/advisories/GHSA-3pvh-63gf-j9mw.md) `GHSA-3pvh-63gf-j9mw`, `CVE-2026-54449`, `PYSEC-2026-3473` · PyPI `langbot`: affected `<=4.10.5`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Metabase: Arbitrary File Read via MySQL Connection Property Injection](https://agentprime.io/advisories/CVE-2026-50147.md) `CVE-2026-50147` · CVE record: metabase metabase · CVSS 7.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)](https://agentprime.io/advisories/CVE-2026-46709.md) `CVE-2026-46709` · CVE record: Eugeny tabby · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox](https://agentprime.io/advisories/GHSA-qh3g-555w-f82q.md) `GHSA-qh3g-555w-f82q` · PyPI `praisonai`: affected `*`, no fixed version yet · CVSS 7.3 High · Withdrawn · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality.](https://agentprime.io/advisories/CVE-2026-30623.md) `CVE-2026-30623` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection - [Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://agentprime.io/advisories/CVE-2026-48345.md) `CVE-2026-48345` · CVE record: Adobe Adobe Animate 2023 and 1 more · CVSS 8.2 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://agentprime.io/advisories/CVE-2026-48347.md) `CVE-2026-48347` · CVE record: Adobe Adobe Animate 2023 and 1 more · CVSS 7.7 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Windows Admin Center (WAC) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-56197.md) `CVE-2026-56197` · CVE record: Microsoft Windows Admin Center · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Outlook Copilot Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-55145.md) `CVE-2026-55145` · CVE record: Microsoft Microsoft Copilot · CVSS 6.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Clipboard User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50488.md) `CVE-2026-50488` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Windows Narrator Braille Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58635.md) `CVE-2026-58635` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Visual Studio Code Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-50520.md) `CVE-2026-50520` · CVE record: Microsoft Visual Studio Code · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Microsoft Edge Copilot Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48561.md) `CVE-2026-48561` · CVE record: Microsoft Microsoft Edge Copilot for Android and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v](https://agentprime.io/advisories/CVE-2026-15428.md) `CVE-2026-15428` · CVE record: TP-Link Systems Inc. Archer VX1800v v1 · CVSS 8.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v](https://agentprime.io/advisories/CVE-2026-15427.md) `CVE-2026-15427` · CVE record: TP-Link Systems Inc. Archer VX1800v v1 · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection](https://agentprime.io/advisories/CVE-2026-58479.md) `CVE-2026-58479` · CVE record: Dan-in-CA SIP · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Apache Kylin: OS Command Injection via Async Query API](https://agentprime.io/advisories/CVE-2026-62392.md) `CVE-2026-62392` · CVE record: Apache Software Foundation Apache Kylin · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Remote Code Execution by administrative user on the Management Server](https://agentprime.io/advisories/CVE-2026-3014.md) `CVE-2026-3014` · CVE record: Milestone Systems XProtect Management Server · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [mk_sap_hana: Privilege escalation via crafted sapstartsrv process name](https://agentprime.io/advisories/CVE-2026-14852.md) `CVE-2026-14852` · CVE record: Checkmk GmbH Checkmk · CVSS 5.2 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection](https://agentprime.io/advisories/CVE-2026-15669.md) `CVE-2026-15669` · CVE record: louisho5 picobot · CVSS 4.8 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection - [Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php](https://agentprime.io/advisories/CVE-2026-61498.md) `CVE-2026-61498` · CVE record: VITEC Flamingo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php](https://agentprime.io/advisories/CVE-2026-60121.md) `CVE-2026-60121` · CVE record: VITEC Flamingo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Command injection in NPC start web endpoint](https://agentprime.io/advisories/CVE-2026-22103.md) `CVE-2026-22103` · CVE record: EVbee DC-80 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Comnand injection in OCPP ReserveLogin message](https://agentprime.io/advisories/CVE-2026-22100.md) `CVE-2026-22100` · CVE record: EVbee DC-80 · CVSS 8.6 High · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Command injection in diagnosis web endpoint](https://agentprime.io/advisories/CVE-2026-22095.md) `CVE-2026-22095` · CVE record: EVbee DC-80 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Shibby Tomato CIFS Mount sub_2D048 os command injection](https://agentprime.io/advisories/CVE-2026-15547.md) `CVE-2026-15547` · CVE record: Shibby Tomato · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Shibby Tomato start_jffs2 sub_2D568 os command injection](https://agentprime.io/advisories/CVE-2026-15546.md) `CVE-2026-15546` · CVE record: Shibby Tomato · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Command injection - [Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection](https://agentprime.io/advisories/CVE-2026-15513.md) `CVE-2026-15513` · CVE record: Wavlink WL-NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection](https://agentprime.io/advisories/CVE-2026-15511.md) `CVE-2026-15511` · CVE record: Comfast CF-WR631AX V3 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection](https://agentprime.io/advisories/CVE-2026-15496.md) `CVE-2026-15496` · CVE record: SonicCloudOrg sonic-agent · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection](https://agentprime.io/advisories/CVE-2026-15495.md) `CVE-2026-15495` · CVE record: SonicCloudOrg sonic-agent · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection](https://agentprime.io/advisories/CVE-2026-15487.md) `CVE-2026-15487` · CVE record: TRENDnet TEW-821DAP · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection](https://agentprime.io/advisories/CVE-2026-15486.md) `CVE-2026-15486` · CVE record: TRENDnet TEW-821DAP · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection](https://agentprime.io/advisories/CVE-2026-15485.md) `CVE-2026-15485` · CVE record: TRENDnet TEW-821DAP · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Command injection - [Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection](https://agentprime.io/advisories/CVE-2026-15481.md) `CVE-2026-15481` · CVE record: Trendnet TEW-635BRM · CVSS 8.7 High · Not analysed yet · Published 12 Jul 2026 · Tags: Other injection, Command injection - [Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code Execution](https://agentprime.io/advisories/CVE-2025-6784.md) `CVE-2025-6784` · CVE record: tigroumeow Code Engine – PHP Snippets, AI Functions & Automation for WordPress · CVSS 8.8 High · Not analysed yet · Published 11 Jul 2026 · Tags: Command injection - [mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials](https://agentprime.io/advisories/GHSA-wmg3-h8mf-wgvr.md) `GHSA-wmg3-h8mf-wgvr`, `CVE-2026-61459`, `PYSEC-2026-3685` · npm `mcp-server-kubernetes`: affected `<3.9.0`, fixed in `3.9.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)](https://agentprime.io/advisories/GHSA-m93h-4hw7-5qcm.md) `GHSA-m93h-4hw7-5qcm`, `CVE-2026-54088`, `GO-2026-5962` · Go `github.com/filebrowser/filebrowser/v2`: affected `<2.63.6`, fixed in `2.63.6` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection, Authentication bypass - [HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management](https://agentprime.io/advisories/CVE-2025-30007.md) `CVE-2025-30007` · CVE record: hestiacp hestiacp · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action](https://agentprime.io/advisories/GHSA-wrw8-384c-cg76.md) `GHSA-wrw8-384c-cg76` · PyPI `praisonai`: affected `<=4.6.77`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [MaxKB MCP tool import validation bypass allows post-authentication remote code execution](https://agentprime.io/advisories/CVE-2026-54149.md) `CVE-2026-54149` · CVE record: 1Panel-dev MaxKB · CVSS 8.8 High · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [OS command injection in Dell PowerFlex Manager](https://agentprime.io/advisories/CVE-2026-56688.md) `CVE-2026-56688` · CVE record: Dell PowerFlex Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [OS Command Injection in R-SOFT DMS](https://agentprime.io/advisories/CVE-2026-41880.md) `CVE-2026-41880` · CVE record: R-SOFT SERWIS DMS · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [OS Command Injection in R-SOFT DMS](https://agentprime.io/advisories/CVE-2026-41876.md) `CVE-2026-41876` · CVE record: R-SOFT SERWIS DMS · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2026 · Tags: Command injection - [laravel-backup-restore has an OS Command Injection during database restore](https://agentprime.io/advisories/GHSA-w9mx-xmg4-gc4r.md) `GHSA-w9mx-xmg4-gc4r`, `CVE-2026-53932`, `PKSA-c7fx-vfvm-h6fn` · Packagist `wnx/laravel-backup-restore`: affected `<1.9.4`, fixed in `1.9.4` · CVSS 8.0 High · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection - [PAN-OS: Authenticated Command Injection in CLI](https://agentprime.io/advisories/CVE-2026-0286.md) `CVE-2026-0286` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection - [Discourse: Remote code execution via pdf uploads](https://agentprime.io/advisories/CVE-2026-55420.md) `CVE-2026-55420` · CVE record: discourse discourse · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection - [Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-59734.md) `CVE-2026-59734` · CVE record: coollabsio coolify · CVSS 8.8 High · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection - [Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment](https://agentprime.io/advisories/CVE-2026-59726.md) `CVE-2026-59726` · CVE record: ruvnet ruflo · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection, Authentication bypass, CWE-942 - [Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection](https://agentprime.io/advisories/CVE-2026-59721.md) `CVE-2026-59721` · CVE record: hoppscotch hoppscotch · CVSS 7.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: Command injection, Broken access control Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .