# Command injection. Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [OpenWrt luci-app-dockerman Read ACL Remote Code Execution](https://agentprime.io/advisories/CVE-2026-69096.md) `CVE-2026-69096` · CVE record: openwrt luci · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection - [GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection](https://agentprime.io/advisories/CVE-2026-18601.md) `CVE-2026-18601` · CVE record: GL.iNet GL-MT3000 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection](https://agentprime.io/advisories/CVE-2026-18600.md) `CVE-2026-18600` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection](https://agentprime.io/advisories/CVE-2026-18599.md) `CVE-2026-18599` · CVE record: GL.iNet GL-MT3000 · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection - [GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection](https://agentprime.io/advisories/CVE-2026-18598.md) `CVE-2026-18598` · CVE record: GL.iNet GL-MT3000 · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Other injection, Command injection - [Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection](https://agentprime.io/advisories/CVE-2026-18590.md) `CVE-2026-18590` · CVE record: Wavlink WL-NU516U1 · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection - [Wavlink WL-NU516U1 Config Import os command injection](https://agentprime.io/advisories/CVE-2026-18587.md) `CVE-2026-18587` · CVE record: Wavlink WL-NU516U1 · CVSS 7.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection - [An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.](https://agentprime.io/advisories/CVE-2026-52102.md) `CVE-2026-52102` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection - [The "s init" command in Serverless-Devs @serverless-devs/s <= 3.1.11 passes unsanitized user input to child_process.spawn() with shell: true.](https://agentprime.io/advisories/CVE-2026-51190.md) `CVE-2026-51190` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Command injection - [Duplicate Advisory: GitPython unsafe clone option gate bypass through joined short options](https://agentprime.io/advisories/GHSA-cw2r-r7mw-j3hc.md) `GHSA-cw2r-r7mw-j3hc` · PyPI `gitpython`: affected `=3.1.50`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 1 Aug 2026 · Tags: Command injection - [Duplicate Advisory: GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist](https://agentprime.io/advisories/GHSA-6r2r-ww24-7h52.md) `GHSA-6r2r-ww24-7h52` · PyPI `gitpython`: affected `<=3.1.50`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 1 Aug 2026 · Tags: Command injection - [Duplicate Advisory: GitPython: command injection via unguarded Git options in \`Repo.archive()\`, \`git.ls_remote()\`, and arbitrary file overwrite via \`Repo.iter_commits()\` / \`Repo.blame()\`](https://agentprime.io/advisories/GHSA-4vpg-pfj8-m33q.md) `GHSA-4vpg-pfj8-m33q` · PyPI `gitpython`: affected `<=3.1.50`, no fixed version yet · CVSS 8.4 High · Withdrawn · Not analysed yet · Published 1 Aug 2026 · Tags: Command injection - [GitPython 3.1.50 fails to recognize joined short-option forms such as -u\ (the short form of --upload-pack=\) when enforcing its default unsafe-option gate. When an application passes a...](https://agentprime.io/advisories/GHSA-v396-v7q4-x2qj.md) `GHSA-v396-v7q4-x2qj`, `CVE-2026-67324`, `PYSEC-2026-3947` · PyPI `gitpython`: affected `>=3.1.50, <3.1.51`, fixed in `3.1.51` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Command injection - [Wazuh GitHub Actions Shell Injection via Fork Pull Request](https://agentprime.io/advisories/CVE-2026-67308.md) `CVE-2026-67308` · CVE record: wazuh wazuh · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Command injection - [Command Injection Vulnerability in OpenVPN of TP-Link Archer AXE75](https://agentprime.io/advisories/CVE-2026-9044.md) `CVE-2026-9044` · CVE record: TP-Link Systems Inc. AXE75 V1 · CVSS 8.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [pgAdmin 4: RCE via backslash-escape mismatch in Import/Export Data query guard (incomplete defense, sibling gap to CVE-2025-13780)](https://agentprime.io/advisories/CVE-2026-17566.md) `CVE-2026-17566` · CVE record: pgadmin.org pgAdmin 4 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection, CWE-115 - [pgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution](https://agentprime.io/advisories/CVE-2026-17347.md) `CVE-2026-17347` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.7 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [OS command injection in Hikvision DS-3WAP521-SI and others](https://agentprime.io/advisories/CVE-2026-16843.md) `CVE-2026-16843` · CVE record: Hikvision DS-3WAP521-SI and 4 more · CVSS 7.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [Command injection in Advantech ADAM-3600](https://agentprime.io/advisories/CVE-2026-43830.md) `CVE-2026-43830` · CVE record: Advantech ADAM-3600 · CVSS 8.6 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection](https://agentprime.io/advisories/CVE-2026-18157.md) `CVE-2026-18157` · CVE record: RedHatInsights yggdrasil-worker-package-manager and 1 more · CVSS 7.8 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulner…](https://agentprime.io/advisories/CVE-2026-38713.md) `CVE-2026-38713` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulner…](https://agentprime.io/advisories/CVE-2026-38711.md) `CVE-2026-38711` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface.](https://agentprime.io/advisories/CVE-2026-38710.md) `CVE-2026-38710` · CVE record · CVSS 7.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulner…](https://agentprime.io/advisories/CVE-2026-38708.md) `CVE-2026-38708` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Command injection - [This Power Hardware Management Console update is being released to address](https://agentprime.io/advisories/CVE-2026-12943.md) `CVE-2026-12943` · CVE record: IBM HMC V10.3.1050.0 and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints](https://agentprime.io/advisories/CVE-2026-12940.md) `CVE-2026-12940` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check](https://agentprime.io/advisories/GHSA-xc5w-4v5w-7x65.md) `GHSA-xc5w-4v5w-7x65`, `CVE-2026-67438`, `GO-2026-6145` · Go `github.com/OliveTin/OliveTin`: affected `>=0.0.0-20251025234746-ef5a67e7b8ea, <0.0.0-20260708084548-995ff79736f2`, fixed in `0.0.0-20260708084548-995ff79736f2` · CVSS 6.6 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings](https://agentprime.io/advisories/CVE-2026-14522.md) `CVE-2026-14522` · CVE record: IBM App Connect Enterprise · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [OS command injection in Eaton PADM](https://agentprime.io/advisories/CVE-2026-22622.md) `CVE-2026-22622` · CVE record: Eaton PADM · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [OS command injection in Eaton PADM](https://agentprime.io/advisories/CVE-2026-22621.md) `CVE-2026-22621` · CVE record: Eaton PADM · CVSS 8.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Command Injection in SCM (idledisconnect parameter)](https://agentprime.io/advisories/CVE-2026-7849.md) `CVE-2026-7849` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file](https://agentprime.io/advisories/CVE-2026-44106.md) `CVE-2026-44106` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Local Privilege Escalation via pppd password injection](https://agentprime.io/advisories/CVE-2026-44099.md) `CVE-2026-44099` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [OS Command Injection in OCPP Agent via charge_box_id](https://agentprime.io/advisories/CVE-2026-44098.md) `CVE-2026-44098` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [udhcpc Privilege Escalation](https://agentprime.io/advisories/CVE-2026-44096.md) `CVE-2026-44096` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Local Privilege Escalation via Network scripts](https://agentprime.io/advisories/CVE-2026-44095.md) `CVE-2026-44095` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script](https://agentprime.io/advisories/CVE-2026-44093.md) `CVE-2026-44093` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection](https://agentprime.io/advisories/CVE-2026-16524.md) `CVE-2026-16524` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulner…](https://agentprime.io/advisories/CVE-2026-38709.md) `CVE-2026-38709` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file](https://agentprime.io/advisories/CVE-2026-35847.md) `CVE-2026-35847` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Command injection - [Logging operator has Fluentd configuration injection that allows remote code execution](https://agentprime.io/advisories/GHSA-mjqf-28ph-426h.md) `GHSA-mjqf-28ph-426h`, `CVE-2026-54680`, `GO-2026-6142` · Go `github.com/kube-logging/logging-operator`: affected `<0.0.0-20260608145523-cf437d7f1e05`, fixed in `0.0.0-20260608145523-cf437d7f1e05` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Command injection - [Arbitrary Command Execution in GNU Bison](https://agentprime.io/advisories/CVE-2026-56389.md) `CVE-2026-56389` · CVE record: GNU Bison · CVSS 6.8 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Command injection - [OS command injection in IBM Aspera Faspex](https://agentprime.io/advisories/CVE-2026-14958.md) `CVE-2026-14958` · CVE record: IBM Aspera Faspex 5 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jul 2026 · Tags: Command injection - [OS Command Injection in IBM Aspera Faspex](https://agentprime.io/advisories/CVE-2026-14959.md) `CVE-2026-14959` · CVE record: IBM Aspera Faspex 5 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Jul 2026 · Tags: Command injection - [OS command injection in ELECOM CO.,LTD. WAB-M1775-PS and others](https://agentprime.io/advisories/CVE-2026-61376.md) `CVE-2026-61376` · CVE record: ELECOM CO.,LTD. WAB-M1775-PS and 4 more · CVSS 8.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Command injection - [OS command injection in ELECOM CO.,LTD. WRC-X3000GS3-B and others](https://agentprime.io/advisories/CVE-2026-59764.md) `CVE-2026-59764` · CVE record: ELECOM CO.,LTD. WRC-X3000GS3-B and 1 more · CVSS 8.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Command injection - [Argument injection in Apple macOS](https://agentprime.io/advisories/CVE-2026-43698.md) `CVE-2026-43698` · CVE record: Apple macOS · CVSS 7.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [OS command injection in NVIDIA NeMo Framework](https://agentprime.io/advisories/CVE-2026-24252.md) `CVE-2026-24252` · CVE record: NVIDIA NeMo Framework · CVSS 7.8 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [VeloCloud Orchestrator OS Command Injection](https://agentprime.io/advisories/CVE-2026-16812.md) `CVE-2026-16812` · CVE record: Arista Networks VeloCloud Orchestrator On-Prem · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [Improper Neutralization of Special Elements used in an OS Command Vulnerability](https://agentprime.io/advisories/CVE-2025-59172.md) `CVE-2025-59172` · CVE record: Ericsson Packet Core Controller (PCC) · CVSS 8.5 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality](https://agentprime.io/advisories/CVE-2026-59688.md) `CVE-2026-59688` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface](https://agentprime.io/advisories/CVE-2026-59687.md) `CVE-2026-59687` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface](https://agentprime.io/advisories/CVE-2026-59686.md) `CVE-2026-59686` · CVE record: Progress Software LoadMaster and 3 more · CVSS 8.4 High · Not analysed yet · Published 27 Jul 2026 · Tags: Command injection - [NoteGen arbitrary OS command execution via Tauri shell:allow-execute for bash/python](https://agentprime.io/advisories/CVE-2026-17497.md) `CVE-2026-17497` · CVE record: codexu NoteGen · CVSS 8.3 High · Not analysed yet · Published 26 Jul 2026 · Tags: Command injection, Broken access control, CWE-1249 - [Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options](https://agentprime.io/advisories/CVE-2026-16766.md) `CVE-2026-16766` · CVE record: RRWO Catalyst::View::Wkhtmltopdf · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jul 2026 · Tags: Command injection - [AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()](https://agentprime.io/advisories/GHSA-j6g5-3hh3-pgw8.md) `GHSA-j6g5-3hh3-pgw8`, `CVE-2026-16796`, `PYSEC-2026-3551` · PyPI `bedrock-agentcore`: affected `<1.18.1`, fixed in `1.18.1` · CVSS 8.4 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection - [Shescape: Shell injection via unescaped parentheses on Windows with CMD](https://agentprime.io/advisories/GHSA-w4hw-qcx7-56pr.md) `GHSA-w4hw-qcx7-56pr`, `CVE-2026-73414` · npm `shescape`: affected `<2.1.14 || >=3.0.0, <3.0.1`, fixed in `2.1.14`, `3.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection, CWE-150 - [Shescape: Path disclosure on Unix with Zsh](https://agentprime.io/advisories/GHSA-6v4m-fw66-8r4x.md) `GHSA-6v4m-fw66-8r4x`, `CVE-2026-73412` · npm `shescape`: affected `<2.1.14 || >=3.0.0, <3.0.1`, fixed in `2.1.14`, `3.0.1` · CVSS 6.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection, CWE-155 - [Pheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes](https://agentprime.io/advisories/GHSA-g3hq-hphg-8fhh.md) `GHSA-g3hq-hphg-8fhh`, `PKSA-2169-f5hg-9g35` · Packagist `pheditor/pheditor`: affected `<2.0.7`, fixed in `2.0.7` · CVSS 8.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: Command injection - [Claude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution](https://agentprime.io/advisories/GHSA-7835-87q9-rgvv.md) `GHSA-7835-87q9-rgvv`, `CVE-2026-55607` · npm `@anthropic-ai/claude-code`: affected `>=2.1.38, <2.1.163`, fixed in `2.1.163` · CVSS 7.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Command injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .