# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [CodeWhale: Argument Injection in \`git_blame\` Tool Allows Arbitrary File Read Without Approval](https://agentprime.io/advisories/GHSA-c6mw-8xh8-gpq6.md)
  `GHSA-c6mw-8xh8-gpq6`, `CVE-2026-75912` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.3 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection, Information disclosure
- [CodeWhale: Argument Injection in \`git_show\` Tool Allows Arbitrary File Write Without Approval](https://agentprime.io/advisories/GHSA-7j5w-7r7x-9v27.md)
  `GHSA-7j5w-7r7x-9v27`, `CVE-2026-75913` · crates.io `codewhale-tui` and 3 more: affected `>=0.8.41, <0.8.64`, fixed in `0.8.64` · CVSS 8.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Path traversal, Command injection
- [OS command injection in Amazon log4j-cve-2021-44228-hotpatch](https://agentprime.io/advisories/CVE-2026-85656.md)
  `CVE-2026-85656` · CVE record: Amazon log4j-cve-2021-44228-hotpatch · CVSS 8.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [IBM i is Affected By Multiple Vulnerabilities in Debug Server](https://agentprime.io/advisories/CVE-2026-16826.md)
  `CVE-2026-16826` · CVE record: IBM i · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [IBM i is Affected By Multiple Vulnerabilities in Debug Server](https://agentprime.io/advisories/CVE-2026-17499.md)
  `CVE-2026-17499` · CVE record: IBM i · CVSS 4.4 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [IBM i is Affected By Multiple Vulnerabilities in Debug Server](https://agentprime.io/advisories/CVE-2026-18073.md)
  `CVE-2026-18073` · CVE record: IBM i · CVSS 4.4 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [SadTalker OS Command Injection via Audio Filename](https://agentprime.io/advisories/CVE-2026-85696.md)
  `CVE-2026-85696` · CVE record: OpenTalker SadTalker · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [zerox 1.1.20 OS Command Injection via Document URL File Extension](https://agentprime.io/advisories/CVE-2026-85672.md)
  `CVE-2026-85672` · CVE record: getomni-ai zerox · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [cli-mcp-server 0.2.5 Command Allowlist Bypass via Shell Substitution](https://agentprime.io/advisories/CVE-2026-85660.md)
  `CVE-2026-85660` · CVE record: MladenSU cli-mcp-server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters](https://agentprime.io/advisories/CVE-2026-85626.md)
  `CVE-2026-85626` · CVE record: cyanheads git-mcp-server · CVSS 8.7 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client](https://agentprime.io/advisories/CVE-2026-74237.md)
  `CVE-2026-74237` · CVE record: GFI Software GFI Exinda AI and 1 more · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [OS command injection in Xing Inc. XING CPTrans-ME-X](https://agentprime.io/advisories/CVE-2026-62928.md)
  `CVE-2026-62928` · CVE record: Xing Inc. XING CPTrans-ME-X · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request.](https://agentprime.io/advisories/CVE-2026-79423.md)
  `CVE-2026-79423` · CVE record · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to inject arbitra…](https://agentprime.io/advisories/CVE-2026-75161.md)
  `CVE-2026-75161` · CVE record · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2026 · Tags: Command injection
- [MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname](https://agentprime.io/advisories/CVE-2026-85439.md)
  `CVE-2026-85439` · CVE record: moos-ivp moos-ivp · CVSS 8.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names](https://agentprime.io/advisories/CVE-2026-85426.md)
  `CVE-2026-85426` · CVE record: moos-ivp moos-ivp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS](https://agentprime.io/advisories/CVE-2026-85425.md)
  `CVE-2026-85425` · CVE record: moos-ivp moos-ivp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection](https://agentprime.io/advisories/CVE-2026-85224.md)
  `CVE-2026-85224` · CVE record: D-Link DNS-320 ShareCenter · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [D-Link DNS-340L CGI dropbox.cgi os command injection](https://agentprime.io/advisories/CVE-2026-85223.md)
  `CVE-2026-85223` · CVE record: D-Link DNS-340L · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [D-Link DNS-340L Add-On Center addon_center.cgi os command injection](https://agentprime.io/advisories/CVE-2026-85222.md)
  `CVE-2026-85222` · CVE record: D-Link DNS-340L · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [Claude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)](https://agentprime.io/advisories/GHSA-79wm-x847-7cvg.md)
  `GHSA-79wm-x847-7cvg`, `CVE-2026-73222` · npm `claude-code-templates`: affected `<1.29.4`, fixed in `1.29.4` · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection, Authentication bypass, Cross-site request forgery (CSRF)
- [OS command injection in the Amazon CodeCatalyst blueprints SDK](https://agentprime.io/advisories/CVE-2026-85012.md)
  `CVE-2026-85012` · CVE record: AWS @amazon-codecatalyst/blueprints.blueprint · CVSS 8.5 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection](https://agentprime.io/advisories/CVE-2026-71963.md)
  `CVE-2026-71963` · CVE record: NousResearch hermes-agent · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal](https://agentprime.io/advisories/CVE-2026-84967.md)
  `CVE-2026-84967` · CVE record: MongoDB MongoDB for VS Code · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [Command injection in Dell SmartFabric OS10](https://agentprime.io/advisories/CVE-2026-63694.md)
  `CVE-2026-63694` · CVE record: Dell SmartFabric OS10 · CVSS 5.0 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [OS command injection in Dell SmartFabric OS10 Software](https://agentprime.io/advisories/CVE-2026-35160.md)
  `CVE-2026-35160` · CVE record: Dell SmartFabric OS10 Software · CVSS 5.0 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2025-12737.md)
  `CVE-2025-12737` · CVE record: WSO2 WSO2 Open Banking AM and 4 more · CVSS 8.4 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [n8n before 1.123.73 Remote Code Execution via Git Node](https://agentprime.io/advisories/CVE-2026-85168.md)
  `CVE-2026-85168` · CVE record: n8n-io n8n · CVSS 7.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [OS command injection in privileged configuration handling](https://agentprime.io/advisories/CVE-2026-84830.md)
  `CVE-2026-84830` · CVE record: SEPPmail AG Secure Email Gateway · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection, Privilege escalation
- [Unsafe deserialization in the REST interface](https://agentprime.io/advisories/CVE-2026-84832.md)
  `CVE-2026-84832` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection, Insecure deserialization
- [ZhongBangKeJi CRMEB Custom Scheduled Task Feature save eval os command injection](https://agentprime.io/advisories/CVE-2026-85040.md)
  `CVE-2026-85040` · CVE record: ZhongBangKeJi CRMEB · CVSS 5.1 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection
- [OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods](https://agentprime.io/advisories/GHSA-2mw5-23gm-pccq.md)
  `GHSA-2mw5-23gm-pccq`, `CVE-2026-73667`, `GO-2026-6357` · Go `github.com/openchoreo/openchoreo`: affected `<1.0.4 || >=1.1.0, <1.1.4 || >=1.2.0-rc.1, <1.2.0-rc.2`, fixed in `1.0.4`, `1.1.4`, `1.2.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform](https://agentprime.io/advisories/CVE-2026-79756.md)
  `CVE-2026-79756` · CVE record: nuclio nuclio · CVSS 8.7 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)](https://agentprime.io/advisories/CVE-2026-79755.md)
  `CVE-2026-79755` · CVE record: nuclio nuclio · CVSS 8.0 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Nuclio: Kaniko build tempDir command injection](https://agentprime.io/advisories/CVE-2026-79754.md)
  `CVE-2026-79754` · CVE record: nuclio nuclio · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation](https://agentprime.io/advisories/CVE-2026-53611.md)
  `CVE-2026-53611` · CVE record: AS203038 looking-glass · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [OS command injection in Jenkins Project Jenkins TICS Plugin](https://agentprime.io/advisories/CVE-2026-84675.md)
  `CVE-2026-84675` · CVE record: Jenkins Project Jenkins TICS Plugin · CVSS 7.4 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()](https://agentprime.io/advisories/CVE-2026-84838.md)
  `CVE-2026-84838` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Rpm: command injection in \`rpmbuild -t\*\` (\`gettarspec\`) via unescaped tarball path](https://agentprime.io/advisories/CVE-2026-84837.md)
  `CVE-2026-84837` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [Coolify before 4.2.0 Remote Code Execution via Environment Variable Key](https://agentprime.io/advisories/CVE-2026-84694.md)
  `CVE-2026-84694` · CVE record: coollabsio coolify · CVSS 8.7 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [OS command injection in Westermo WeOS](https://agentprime.io/advisories/CVE-2025-46418.md)
  `CVE-2025-46418` · CVE record: Westermo WeOS · CVSS 7.6 High · Not analysed yet · Published 2 Sept 2026 · Tags: Command injection
- [OS command injection in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2026-83549.md)
  `CVE-2026-83549` · CVE record: SonicWall SMA1000 · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)](https://agentprime.io/advisories/GHSA-m4rf-3fr8-xwx3.md)
  `GHSA-m4rf-3fr8-xwx3`, `CVE-2026-79675`, `PYSEC-2026-3749` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2026-73767.md)
  `CVE-2026-73767` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in the API Endpoint of AOS-CX](https://agentprime.io/advisories/CVE-2026-73766.md)
  `CVE-2026-73766` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Unauthenticated Remote Command Execution in Management Component](https://agentprime.io/advisories/CVE-2026-73763.md)
  `CVE-2026-73763` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 7.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Remote Command Injection Vulnerabilities in AOS-CX Command Line Interface](https://agentprime.io/advisories/CVE-2026-73753.md)
  `CVE-2026-73753` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Remote Command Injection in AOS-CX Web-based Management Interface](https://agentprime.io/advisories/CVE-2026-73751.md)
  `CVE-2026-73751` · CVE record: Hewlett Packard Enterprise (HPE) AOS-CX · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in HPE Networking Fabric Composer Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-73722.md)
  `CVE-2026-73722` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.2 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Unauthenticated Command Injection Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface](https://agentprime.io/advisories/CVE-2026-73717.md)
  `CVE-2026-73717` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Unauthenticated Remote Code Execution in HPE Networking Fabric Composer](https://agentprime.io/advisories/CVE-2026-73716.md)
  `CVE-2026-73716` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 7.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API](https://agentprime.io/advisories/CVE-2026-73712.md)
  `CVE-2026-73712` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process](https://agentprime.io/advisories/CVE-2026-73709.md)
  `CVE-2026-73709` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 8.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API](https://agentprime.io/advisories/CVE-2026-73704.md)
  `CVE-2026-73704` · CVE record: Hewlett Packard Enterprise (HPE) Fabric Composer · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [OS command injection in Dell PowerStore 500T and others](https://agentprime.io/advisories/CVE-2026-58567.md)
  `CVE-2026-58567` · CVE record: Dell PowerStore 500T and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting](https://agentprime.io/advisories/CVE-2026-10195.md)
  `CVE-2026-10195` · CVE record: fs-code FS Poster - WordPress Social media Auto Poster & Scheduler \[Facebook, Instagram, Twitter, Pinterest\] · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Command injection in Dell PowerStore 500T and others](https://agentprime.io/advisories/CVE-2026-79682.md)
  `CVE-2026-79682` · CVE record: Dell PowerStore 500T and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Rpm: command execution via macro expansion in \`rpmuncompress -x\` for crafted \`.gem\` filenames](https://agentprime.io/advisories/CVE-2026-84233.md)
  `CVE-2026-84233` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [Argument injection in Dell PowerStore 500T and others](https://agentprime.io/advisories/CVE-2026-79685.md)
  `CVE-2026-79685` · CVE record: Dell PowerStore 500T and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection
- [OS command injection in Dell PowerStore 500T and others](https://agentprime.io/advisories/CVE-2026-58571.md)
  `CVE-2026-58571` · CVE record: Dell PowerStore 500T and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA5LTAxVDEzOjUyOjUwLjA5MTAwMFoiLCJDVkUtMjAyNi01ODU3MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA5LTA0VDE4OjE0OjU0LjY0MTAwMFoiLCJDVkUtMjAyNi03ODMyNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA5LTA0VDE4OjE0OjU0LjY0MTAwMFoiLCJDVkUtMjAyNi03ODMyNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.