# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution](https://agentprime.io/advisories/GHSA-r9mr-m37c-5fr3.md)
  `GHSA-r9mr-m37c-5fr3`, `CVE-2026-73625`, `PYSEC-2026-3953` · PyPI `gitpython`: affected `<3.1.54`, fixed in `3.1.54` · CVSS 8.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection
- [GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks](https://agentprime.io/advisories/GHSA-6p8h-3wgx-97gf.md)
  `GHSA-6p8h-3wgx-97gf`, `CVE-2026-73623`, `PYSEC-2026-3952` · PyPI `gitpython`: affected `<3.1.54`, fixed in `3.1.54` · CVSS 7.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection, CWE-184
- [GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)](https://agentprime.io/advisories/GHSA-fjr4-x663-mwxc.md)
  `GHSA-fjr4-x663-mwxc`, `CVE-2026-73624`, `PYSEC-2026-3995` · PyPI `gitpython`: affected `<3.1.54`, fixed in `3.1.54` · CVSS 7.2 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection
- [sysPass 3.2.11 Authenticated OS Command Injection via Backup Path](https://agentprime.io/advisories/CVE-2026-65711.md)
  `CVE-2026-65711` · CVE record: nuxsmin sysPass · CVSS 8.6 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection
- [OS command injection in OpenStack Ironic Python Agent](https://agentprime.io/advisories/CVE-2026-66138.md)
  `CVE-2026-66138` · CVE record: OpenStack Ironic Python Agent · CVSS 7.2 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection
- [9router before 0.4.60 Remote Code Execution via default password](https://agentprime.io/advisories/CVE-2026-63732.md)
  `CVE-2026-63732` · CVE record: decolua 9router · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [cal.com Repository Takeover via pull_request_target Workflow](https://agentprime.io/advisories/CVE-2024-58354.md)
  `CVE-2024-58354` · CVE record: calcom cal.diy · CVSS 8.5 High · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [localstack serverless-localstack Configuration index.js os command injection](https://agentprime.io/advisories/CVE-2026-16763.md)
  `CVE-2026-16763` · CVE record: localstack serverless-localstack · CVSS 4.8 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2026-6516.md)
  `CVE-2026-6516` · CVE record: Zohocorp ManageEngine ADAudit Plus · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [release-it conventional-changelog Changelog File index.js writeChangelog os command injection](https://agentprime.io/advisories/CVE-2026-16735.md)
  `CVE-2026-16735` · CVE record: release-it conventional-changelog · CVSS 4.8 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [bahmutov find-cypress-specs Branch index.js shell.exec os command injection](https://agentprime.io/advisories/CVE-2026-16733.md)
  `CVE-2026-16733` · CVE record: bahmutov find-cypress-specs · CVSS 4.8 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update](https://agentprime.io/advisories/CVE-2026-16287.md)
  `CVE-2026-16287` · CVE record: TUBITAK BILGEM Software Technologies Research Institute pardus-update · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [danger allows local OS command injection through crafted file paths](https://agentprime.io/advisories/GHSA-3x93-p86w-5jvh.md)
  `GHSA-3x93-p86w-5jvh`, `CVE-2026-16629` · npm `danger`: affected `<13.0.8`, fixed in `13.0.8` · CVSS 4.8 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Command injection
- [publint package-manager pack.js child_process.exec os command injection](https://agentprime.io/advisories/CVE-2026-16631.md)
  `CVE-2026-16631` · CVE record: publint · CVSS 4.8 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows](https://agentprime.io/advisories/GHSA-fpg6-x68q-5793.md)
  `GHSA-fpg6-x68q-5793`, `CVE-2026-65590` · npm `n8n`: affected `<2.29.8 || >=2.30.0, <2.30.1`, fixed in `2.29.8`, `2.30.1` · CVSS 5.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection](https://agentprime.io/advisories/CVE-2026-16630.md)
  `CVE-2026-16630` · CVE record: syncfusion ej2-javascript-ui-controls · CVSS 4.8 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [n8n: Authenticated code execution in the n8n Git node](https://agentprime.io/advisories/GHSA-rcv6-pvrj-4xcg.md)
  `GHSA-rcv6-pvrj-4xcg`, `CVE-2026-72767` · npm `n8n`: affected `<1.123.67 || >=2.0.0-rc.0, <2.31.5 || >=2.32.0, <2.32.1`, fixed in `1.123.67`, `2.31.5`, `2.32.1` · CVSS 8.7 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [oclif JIT Plugin Entry child_process.exec os command injection](https://agentprime.io/advisories/CVE-2026-16628.md)
  `CVE-2026-16628` · CVE record: oclif · CVSS 4.8 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow](https://agentprime.io/advisories/CVE-2026-14881.md)
  `CVE-2026-14881` · CVE record: MongoDB MongoDB Compass · CVSS 8.4 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Duplicate Advisory: computer-use Shell Sandbox Not Enforced on Linux and Windows](https://agentprime.io/advisories/GHSA-4v35-78jc-648r.md)
  `GHSA-4v35-78jc-648r` · npm `@n8n/computer-use`: affected `*`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings](https://agentprime.io/advisories/CVE-2026-44191.md)
  `CVE-2026-44191` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting](https://agentprime.io/advisories/CVE-2026-44190.md)
  `CVE-2026-44190` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename](https://agentprime.io/advisories/CVE-2026-44189.md)
  `CVE-2026-44189` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [Supermicro SMASH service contain an Arbitrary code execution issue](https://agentprime.io/advisories/CVE-2026-3821.md)
  `CVE-2026-3821` · CVE record: SMCI X14DBG-DAP,X14DBI · CVSS 8.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection](https://agentprime.io/advisories/CVE-2026-16492.md)
  `CVE-2026-16492` · CVE record: umijs umi · CVSS 5.1 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Command injection
- [jsforce SFDX Connection Registry sfdx.js \_execCommand os command injection](https://agentprime.io/advisories/CVE-2026-16489.md)
  `CVE-2026-16489` · CVE record: jsforce · CVSS 4.8 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection](https://agentprime.io/advisories/CVE-2026-16488.md)
  `CVE-2026-16488` · CVE record: QUSETIONS MiniCode-Python · CVSS 2.3 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Command Injection via Malicious OCPP Server](https://agentprime.io/advisories/CVE-2026-8986.md)
  `CVE-2026-8986` · CVE record: Autel MaxiCharger Single · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Unauthenticated Command Injection](https://agentprime.io/advisories/CVE-2026-8985.md)
  `CVE-2026-8985` · CVE record: Autel MaxiCharger Single · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [MeltanoHub vulnerable to command injection in the \`test_dispatcher\` GitHub Actions workflow](https://agentprime.io/advisories/CVE-2026-47690.md)
  `CVE-2026-47690` · CVE record: meltano hub · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection, Code injection
- [Authenticated Command Injection allows arbitrary command execution in CLI Interface](https://agentprime.io/advisories/CVE-2026-44879.md)
  `CVE-2026-44879` · CVE record: Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS) · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [GitPython: command injection via unguarded Git options in \`Repo.archive()\`, \`git.ls_remote()\`, and arbitrary file overwrite via \`Repo.iter_commits()\` / \`Repo.blame()\`](https://agentprime.io/advisories/GHSA-956x-8gvw-wg5v.md)
  `GHSA-956x-8gvw-wg5v`, `CVE-2026-67323`, `PYSEC-2026-3839` · PyPI `gitpython`: affected `<3.1.51`, fixed in `3.1.51` · CVSS 8.6 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Command Injection](https://agentprime.io/advisories/CVE-2026-64881.md)
  `CVE-2026-64881` · CVE record: Tenable, Inc. Security Center · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Command Injection](https://agentprime.io/advisories/CVE-2026-64879.md)
  `CVE-2026-64879` · CVE record: Tenable, Inc. Security Center · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist](https://agentprime.io/advisories/GHSA-2f96-g7mh-g2hx.md)
  `GHSA-2f96-g7mh-g2hx`, `CVE-2026-67325`, `PYSEC-2026-3836` · PyPI `gitpython`: affected `<3.1.51`, fixed in `3.1.51` · CVSS 8.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection, CWE-184
- [Command Injection](https://agentprime.io/advisories/CVE-2026-64878.md)
  `CVE-2026-64878` · CVE record: Tenable, Inc. Security Center · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling](https://agentprime.io/advisories/GHSA-vcrf-j523-4mrf.md)
  `GHSA-vcrf-j523-4mrf`, `CVE-2026-13760` · npm `aws-cdk-lib`: affected `<2.260.0`, fixed in `2.260.0` · CVSS 7.0 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)](https://agentprime.io/advisories/CVE-2026-16493.md)
  `CVE-2026-16493` · CVE record: Red Hat Red Hat Satellite 6.17 for RHEL 9 and 4 more · CVSS 7.8 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Git source checkout from a bundle file could lead to command injection](https://agentprime.io/advisories/CVE-2026-15793.md)
  `CVE-2026-15793` · CVE record: moby BuildKit · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection](https://agentprime.io/advisories/CVE-2026-16448.md)
  `CVE-2026-16448` · CVE record: D-Link DNS-120 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Other injection, Command injection
- [Libssh: libssh: information disclosure via proxycommand %r username expansion](https://agentprime.io/advisories/CVE-2026-59846.md)
  `CVE-2026-59846` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.9 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module](https://agentprime.io/advisories/CVE-2026-16445.md)
  `CVE-2026-16445` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [OS command injection in Zyxel AX7501-B1 firmware](https://agentprime.io/advisories/CVE-2026-6952.md)
  `CVE-2026-6952` · CVE record: Zyxel AX7501-B1 firmware · CVSS 7.2 High · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to \`computer_write_file\`.](https://agentprime.io/advisories/CVE-2026-30631.md)
  `CVE-2026-30631` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Command injection
- [AVideo before 29.0 OS Command Injection via execAsync](https://agentprime.io/advisories/CVE-2026-64625.md)
  `CVE-2026-64625` · CVE record: WWBN AVideo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Command injection
- [FreeRDP RDP File Parser Remote Code Execution via CLI Options](https://agentprime.io/advisories/CVE-2026-64624.md)
  `CVE-2026-64624` · CVE record: FreeRDP FreeRDP · CVSS 8.5 High · Not analysed yet · Published 20 Jul 2026 · Tags: Command injection
- [Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path](https://agentprime.io/advisories/GHSA-4x4j-2g7c-83w6.md)
  `GHSA-4x4j-2g7c-83w6`, `BIT-pillow-2026-55798`, `CVE-2026-55798`, `PYSEC-2026-2257` · PyPI `pillow`: affected `<12.3.0`, fixed in `12.3.0` · CVSS 4.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Command injection
- [GPT-SoVITS 20250606v2pro OS Command Injection via webui.py](https://agentprime.io/advisories/CVE-2026-63766.md)
  `CVE-2026-63766` · CVE record: RVC-Boss GPT-SoVITS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Command injection
- [Authenticated RCE in system_certificates view](https://agentprime.io/advisories/CVE-2026-14448.md)
  `CVE-2026-14448` · CVE record: MB connect line mbCONNECT24 and 3 more · CVSS 8.6 High · Not analysed yet · Published 20 Jul 2026 · Tags: Command injection
- [LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection](https://agentprime.io/advisories/CVE-2026-16133.md)
  `CVE-2026-16133` · CVE record: LiuMengxuan04 MiniCode · CVSS 2.3 Low · Not analysed yet · Published 18 Jul 2026 · Tags: Other injection, Command injection
- [Duplicate Advisory: SurrealDB server-takeover via SurrealQL injection on backup import](https://agentprime.io/advisories/GHSA-h5q3-3v5q-v5j8.md)
  `GHSA-h5q3-3v5q-v5j8` · crates.io `surrealdb`: affected `*`, no fixed version yet · CVSS 8.0 High · Withdrawn · Not analysed yet · Published 18 Jul 2026 · Tags: Command injection
- [Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints](https://agentprime.io/advisories/CVE-2026-14499.md)
  `CVE-2026-14499` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection
- [setup-php: Command Injection in Repository-Derived PHP Version Resolution](https://agentprime.io/advisories/CVE-2026-46420.md)
  `CVE-2026-46420` · CVE record: shivammathur setup-php · CVSS 5.6 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection
- [Multiple Vulnerabilities in IBM Engineering AI hub.](https://agentprime.io/advisories/CVE-2026-15069.md)
  `CVE-2026-15069` · CVE record: IBM Engineering AI Hub · CVSS 5.4 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection
- [An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component](https://agentprime.io/advisories/CVE-2026-52199.md)
  `CVE-2026-52199` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection, Code injection
- [django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model.](https://agentprime.io/advisories/CVE-2026-42168.md)
  `CVE-2026-42168` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection
- [ArcadeDB: Trigger scripts run with java.lang.\* allowed, enabling OS command execution (RCE)](https://agentprime.io/advisories/GHSA-x9f9-r4m8-9xc2.md)
  `GHSA-x9f9-r4m8-9xc2`, `CVE-2026-67340` · Maven `com.arcadedb:arcadedb-engine`: affected `<26.7.2`, fixed in `26.7.2` · CVSS 8.6 High · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection, Code injection
- [Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection](https://agentprime.io/advisories/GHSA-wg4w-wr5q-6vjc.md)
  `GHSA-wg4w-wr5q-6vjc`, `CVE-2026-55578`, `PKSA-c2s6-j4sd-8g42` · Packagist `pheditor/pheditor`: affected `>=2.0.1, <2.0.6`, fixed in `2.0.6` · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection
- [Pheditor has an authenticated terminal command whitelist bypass](https://agentprime.io/advisories/GHSA-9643-6xjp-vx57.md)
  `GHSA-9643-6xjp-vx57`, `CVE-2026-54540`, `PKSA-35mf-8p9f-f31c` · Packagist `pheditor/pheditor`: affected `<2.0.5`, fixed in `2.0.5` · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection
- [OS command injection in Lenovo XClarity Integrator for Microsoft Windows Admin Center](https://agentprime.io/advisories/CVE-2026-14371.md)
  `CVE-2026-14371` · CVE record: Lenovo XClarity Integrator for Microsoft Windows Admin Center · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA3LTE2VDE2OjQ5OjEyLjQ0NTAwMFoiLCJDVkUtMjAyNi0xNDM3MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA3LTI0VDE2OjU0OjA5LjAwMDAwMFoiLCJHSFNBLTc4MzUtODdxOS1yZ3Z2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA3LTI0VDE2OjU0OjA5LjAwMDAwMFoiLCJHSFNBLTc4MzUtODdxOS1yZ3Z2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.