# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [HKUDS nanobot Shell Allowlist shell.py ExecTool.\_spawn os command injection](https://agentprime.io/advisories/CVE-2026-19243.md)
  `CVE-2026-19243` · CVE record: HKUDS nanobot · CVSS 5.3 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [NexTOR IP Changer Unsafely Uses sudo and shell=True](https://agentprime.io/advisories/CVE-2026-48098.md)
  `CVE-2026-48098` · CVE record: 0x5t4l1n NexTOR_IP_CHANGER · CVSS 7.3 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection, Privilege escalation
- [NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution](https://agentprime.io/advisories/CVE-2026-48097.md)
  `CVE-2026-48097` · CVE record: 0x5t4l1n NexTOR_IP_CHANGER · CVSS 7.8 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection, Memory corruption
- [jsii-diff: Command Injection via npm: package argument](https://agentprime.io/advisories/GHSA-wcx4-wpfv-mc5c.md)
  `GHSA-wcx4-wpfv-mc5c`, `CVE-2026-15895` · npm `jsii-diff`: affected `<1.131.0`, fixed in `1.131.0` · CVSS 8.4 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution](https://agentprime.io/advisories/GHSA-wvpp-8hx9-p66j.md)
  `GHSA-wvpp-8hx9-p66j`, `CVE-2026-76220`, `PYSEC-2026-3843` · PyPI `gitpython`: affected `<3.1.58`, fixed in `3.1.58` · CVSS 8.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)](https://agentprime.io/advisories/GHSA-jm78-9fvv-mhgr.md)
  `GHSA-jm78-9fvv-mhgr`, `CVE-2026-76221`, `PYSEC-2026-3783` · PyPI `gitpython`: affected `<3.1.58`, fixed in `3.1.58` · CVSS 8.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Other injection, Command injection
- [GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks](https://agentprime.io/advisories/GHSA-9rj7-rf2p-w77r.md)
  `GHSA-9rj7-rf2p-w77r`, `CVE-2026-76218`, `PYSEC-2026-3840` · PyPI `gitpython`: affected `<3.1.58`, fixed in `3.1.58` · CVSS 7.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection, Code injection
- [GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite](https://agentprime.io/advisories/GHSA-4gmw-gg2m-w46p.md)
  `GHSA-4gmw-gg2m-w46p`, `CVE-2026-76219`, `PYSEC-2026-3838` · PyPI `gitpython`: affected `<3.1.58`, fixed in `3.1.58` · CVSS 7.2 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()](https://agentprime.io/advisories/CVE-2026-15816.md)
  `CVE-2026-15816` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection
- [PHP_CodeSniffer gitblame report command injection via crafted filename](https://agentprime.io/advisories/GHSA-hmqg-cxww-wqhq.md)
  `GHSA-hmqg-cxww-wqhq`, `CVE-2026-67434`, `PKSA-rdkp-vv9z-mjkg` · Packagist `squizlabs/php_codesniffer`: affected `<3.13.6 || >=4.0.0, <4.0.2`, fixed in `3.13.6`, `4.0.2` · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [WGDashboard Remote Code Execution vulnerability](https://agentprime.io/advisories/CVE-2026-15733.md)
  `CVE-2026-15733` · CVE record: WGDashboard WGDashboard · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [sysPass FileBackupService Authenticated OS Command Injection via Backup Path](https://agentprime.io/advisories/CVE-2026-63725.md)
  `CVE-2026-63725` · CVE record: nuxsmin sysPass · CVSS 8.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection](https://agentprime.io/advisories/CVE-2026-19047.md)
  `CVE-2026-19047` · CVE record: NocteDefensor LudusMCP · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection](https://agentprime.io/advisories/CVE-2026-19045.md)
  `CVE-2026-19045` · CVE record: NocteDefensor LudusMCP · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [LeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injection](https://agentprime.io/advisories/CVE-2026-19044.md)
  `CVE-2026-19044` · CVE record: LeeSinLiang godot-mcp · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec](https://agentprime.io/advisories/CVE-2026-53975.md)
  `CVE-2026-53975` · CVE record: Bohdan Triapitsyn OpenChamber · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [OS command injection in Dell Virtual Storage Integrator for VMware vSphere Client](https://agentprime.io/advisories/CVE-2026-67261.md)
  `CVE-2026-67261` · CVE record: Dell Virtual Storage Integrator for VMware vSphere Client · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection](https://agentprime.io/advisories/CVE-2026-19041.md)
  `CVE-2026-19041` · CVE record: MissionSquad mcp-api · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection](https://agentprime.io/advisories/CVE-2026-19039.md)
  `CVE-2026-19039` · CVE record: Kino-Kafkaesque ssh-mcp-server · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [Shibby Tomato wanoptions sub_40F88C os command injection](https://agentprime.io/advisories/CVE-2026-19036.md)
  `CVE-2026-19036` · CVE record: Shibby Tomato · CVSS 8.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [Shibby Tomato qoslimit new_qoslimit_start os command injection](https://agentprime.io/advisories/CVE-2026-19035.md)
  `CVE-2026-19035` · CVE record: Shibby Tomato · CVSS 8.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [Shibby Tomato qoslimittc_stop.sh new_qoslimit_stop os command injection](https://agentprime.io/advisories/CVE-2026-19034.md)
  `CVE-2026-19034` · CVE record: Shibby Tomato · CVSS 8.6 High · Not analysed yet · Published 6 Aug 2026 · Tags: Command injection
- [OpenHands send_pull_request.py initialize_repo command injection](https://agentprime.io/advisories/CVE-2026-19022.md)
  `CVE-2026-19022` · CVE record: OpenHands · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [nearai ironclaw shell.rs classify_command_risk command injection](https://agentprime.io/advisories/CVE-2026-18980.md)
  `CVE-2026-18980` · CVE record: nearai ironclaw · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Command injection
- [rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution](https://agentprime.io/advisories/GHSA-2m8m-jhrm-w6j2.md)
  `GHSA-2m8m-jhrm-w6j2`, `BIT-rclone-2026-71312`, `CVE-2026-71312`, `GO-2026-6182` · Go `github.com/rclone/rclone`: affected `<1.75.0`, fixed in `1.75.0` · CVSS 8.0 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Unescaped deployment environment variables in generated setup commands](https://agentprime.io/advisories/GHSA-qpjc-w5mm-73mj.md)
  `GHSA-qpjc-w5mm-73mj`, `CVE-2026-66297`, `EEF-CVE-2026-66297` · Hex `livebook`: affected `>=0.13.0, <0.18.7 || >=0.19.0, <0.19.9`, fixed in `0.18.7`, `0.19.9` · CVSS 5.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Electron: DevTools embedder handler executes arbitrary files via shell open](https://agentprime.io/advisories/GHSA-f2r8-jv7c-xqmp.md)
  `GHSA-f2r8-jv7c-xqmp`, `CVE-2026-70611` · npm `electron`: affected `<39.8.9 || >=40.0.0-alpha.1, <40.9.2 || >=41.0.0-alpha.1, <41.2.1 || >=42.0.0-alpha.1, <42.0.0-beta.3`, fixed in `39.8.9`, `40.9.2`, `41.2.1`, `42.0.0-beta.3` · CVSS 6.9 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Langflow is affected by OS Command Injection in Model Context Protocol features](https://agentprime.io/advisories/CVE-2026-17625.md)
  `CVE-2026-17625` · CVE record: IBM Langflow OSS · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Langflow is affected OS Command Injection in Model Context Protocol features](https://agentprime.io/advisories/CVE-2026-17623.md)
  `CVE-2026-17623` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [IBM QRadar SIEM is vulnerable to remote code execution by privileged users](https://agentprime.io/advisories/CVE-2026-13477.md)
  `CVE-2026-13477` · CVE record: IBM QRadar · CVSS 4.7 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename](https://agentprime.io/advisories/CVE-2026-71284.md)
  `CVE-2026-71284` · CVE record: fledge-iot fledge · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Command Injection in @oblique/cli](https://agentprime.io/advisories/CVE-2026-16022.md)
  `CVE-2026-16022` · CVE record: Swiss Federal Office of Information Technology, Systems and Telecommunication @oblique/cli · CVSS 7.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [backmeup (npm) - OS Command Injection via Backup Option Values](https://agentprime.io/advisories/CVE-2026-71243.md)
  `CVE-2026-71243` · CVE record: adaltas backmeup · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [xidown - Argument Injection via Unterminated yt-dlp Command Line Construction](https://agentprime.io/advisories/CVE-2026-71212.md)
  `CVE-2026-71212` · CVE record: indravoyager xidown · CVSS 4.4 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter](https://agentprime.io/advisories/CVE-2026-7693.md)
  `CVE-2026-7693` · CVE record: inisev Backup Migration · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [HashBrown CMS - OS Command Injection via Git Deployer Branch Field](https://agentprime.io/advisories/CVE-2026-70375.md)
  `CVE-2026-70375` · CVE record: HashBrownCMS hashbrown-cms · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [HashBrown CMS - OS Command Injection in Media Upload Thumbnail Generation](https://agentprime.io/advisories/CVE-2026-70374.md)
  `CVE-2026-70374` · CVE record: HashBrownCMS hashbrown-cms · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [H3C NX15 esps repeaterproc command injection](https://agentprime.io/advisories/CVE-2026-18902.md)
  `CVE-2026-18902` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: Other injection, Command injection
- [H3C NX15 Backend RPC esps file.exec os command injection](https://agentprime.io/advisories/CVE-2026-18900.md)
  `CVE-2026-18900` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2026 · Tags: Command injection
- [H3C NX15 esps reload.reload_config command injection](https://agentprime.io/advisories/CVE-2026-18814.md)
  `CVE-2026-18814` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [H3C NX15 esps delete command injection](https://agentprime.io/advisories/CVE-2026-18813.md)
  `CVE-2026-18813` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call](https://agentprime.io/advisories/CVE-2026-66902.md)
  `CVE-2026-66902` · CVE record: CJCOLLIER Google::Auth · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Command injection, CWE-829
- [H3C NX15 esps esps.ipv6.wan command injection](https://agentprime.io/advisories/CVE-2026-18812.md)
  `CVE-2026-18812` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [H3C NX15 esps add command injection](https://agentprime.io/advisories/CVE-2026-18811.md)
  `CVE-2026-18811` · CVE record: H3C NX15 · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [Remote Command Injection via OS Profile Password in Lenovo XClarity Orchestrator](https://agentprime.io/advisories/CVE-2026-16793.md)
  `CVE-2026-16793` · CVE record: Lenovo XClarity Orchestrator · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: Command injection, CWE-20
- [GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection](https://agentprime.io/advisories/CVE-2026-18787.md)
  `CVE-2026-18787` · CVE record: GL.iNet AX1800 · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [OS command injection in Zyxel WAX650S firmware](https://agentprime.io/advisories/CVE-2026-6837.md)
  `CVE-2026-6837` · CVE record: Zyxel WAX650S firmware · CVSS 7.2 High · Not analysed yet · Published 4 Aug 2026 · Tags: Command injection
- [GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection](https://agentprime.io/advisories/CVE-2026-18686.md)
  `CVE-2026-18686` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Command injection
- [H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V2…](https://agentprime.io/advisories/CVE-2025-29296.md)
  `CVE-2025-29296` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Command injection
- [GL.iNet GL-MT3000 modem.so glc set_upgrade command injection](https://agentprime.io/advisories/CVE-2026-18685.md)
  `CVE-2026-18685` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 modem.so glc remove_profile command injection](https://agentprime.io/advisories/CVE-2026-18684.md)
  `CVE-2026-18684` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count](https://agentprime.io/advisories/GHSA-p538-c434-8v24.md)
  `GHSA-p538-c434-8v24`, `CVE-2026-73621`, `PYSEC-2026-3950` · PyPI `gitpython`: affected `<3.1.56`, fixed in `3.1.56` · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection
- [Sangfor Operation and Maintenance Security Management System Login Endpoint portal_login com.sbr.fort.foreignDP.DpLoginController os command injection](https://agentprime.io/advisories/CVE-2026-18641.md)
  `CVE-2026-18641` · CVE record: Sangfor Operation and Maintenance Security Management System · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection
- [ClearOS 7.9 OS Command Injection via Log Viewer filter parameter](https://agentprime.io/advisories/CVE-2026-67599.md)
  `CVE-2026-67599` · CVE record: ClearFoundation ClearOS · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection](https://agentprime.io/advisories/CVE-2026-18616.md)
  `CVE-2026-18616` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection](https://agentprime.io/advisories/CVE-2026-18615.md)
  `CVE-2026-18615` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection](https://agentprime.io/advisories/CVE-2026-18614.md)
  `CVE-2026-18614` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection](https://agentprime.io/advisories/CVE-2026-18612.md)
  `CVE-2026-18612` · CVE record: GL-iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection](https://agentprime.io/advisories/CVE-2026-18602.md)
  `CVE-2026-18602` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection
- [Telenia TVox 26.5.3 OS Command Injection via action_audio.php](https://agentprime.io/advisories/CVE-2026-67608.md)
  `CVE-2026-67608` · CVE record: Telenia Software TVox · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA4LTAzVDEzOjMwOjM1LjQ0MjAwMFoiLCJDVkUtMjAyNi02NzYwOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA4LTA3VDIyOjQwOjIzLjgxMTAwMFoiLCJDVkUtMjAyNi00ODEyMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA4LTA3VDIyOjQwOjIzLjgxMTAwMFoiLCJDVkUtMjAyNi00ODEyMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.