# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Argument injection in Proxmox pmg-api](https://agentprime.io/advisories/CVE-2026-94588.md)
  `CVE-2026-94588` · CVE record: Proxmox pmg-api · CVSS 4.4 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [MaxKB: Prompt-injectable agent can lead to command execution](https://agentprime.io/advisories/CVE-2026-77521.md)
  `CVE-2026-77521` · CVE record: 1Panel-dev MaxKB · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-749
- [MaxKB AWS Bedrock model credential injection leads to remote code execution](https://agentprime.io/advisories/CVE-2026-79916.md)
  `CVE-2026-79916` · CVE record: 1Panel-dev MaxKB · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root](https://agentprime.io/advisories/CVE-2026-55897.md)
  `CVE-2026-55897` · CVE record: openwrt luci · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in \_sendmail_pipe](https://agentprime.io/advisories/CVE-2026-93012.md)
  `CVE-2026-93012` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API](https://agentprime.io/advisories/CVE-2026-82412.md)
  `CVE-2026-82412` · CVE record: ntop ntopng · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5](https://agentprime.io/advisories/CVE-2026-84285.md)
  `CVE-2026-84285` · CVE record: Dassault Systèmes Tuleap Enterprise Edition · CVSS 8.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [Temporal Server worker deployment compute provider executes a caller-supplied command on the Worker Service host](https://agentprime.io/advisories/CVE-2026-89139.md)
  `CVE-2026-89139` · CVE record: Temporal Technologies, Inc. Temporal Server · CVSS 8.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection, CWE-749, CWE-1188
- [Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection](https://agentprime.io/advisories/CVE-2026-94139.md)
  `CVE-2026-94139` · CVE record: Chengdu Feiyuxing Technology Feiyu Star Router · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection](https://agentprime.io/advisories/CVE-2026-94138.md)
  `CVE-2026-94138` · CVE record: Chengdu Feiyuxing Technology Feiyu Star Router · CVSS 5.1 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 Backup Restore restore.cgi command injection](https://agentprime.io/advisories/CVE-2026-94099.md)
  `CVE-2026-94099` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection](https://agentprime.io/advisories/CVE-2026-94098.md)
  `CVE-2026-94098` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Other injection, Command injection
- [An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitrary code via the src/main/url.cc and src/gtk/menu_popup.c components](https://agentprime.io/advisories/CVE-2026-79079.md)
  `CVE-2026-79079` · CVE record · CVSS 7.8 High · Not analysed yet · Published 21 Sept 2026 · Tags: Command injection
- [Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection](https://agentprime.io/advisories/CVE-2026-94097.md)
  `CVE-2026-94097` · CVE record: Netcore NBR200V2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 LAN IP Configuration network_tools command injection](https://agentprime.io/advisories/CVE-2026-94096.md)
  `CVE-2026-94096` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection](https://agentprime.io/advisories/CVE-2026-94095.md)
  `CVE-2026-94095` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection](https://agentprime.io/advisories/CVE-2026-94031.md)
  `CVE-2026-94031` · CVE record: 0-Gaurav-0 nexus-mcp · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [getID3 before 1.9.26 OS Command Injection via Unescaped Filenames](https://agentprime.io/advisories/CVE-2026-94106.md)
  `CVE-2026-94106` · CVE record: james-heinrich getid3 · CVSS 8.7 High · Not analysed yet · Published 20 Sept 2026 · Tags: Command injection
- [aiyiyi121 SxDevOps Command services.py generate_host_task command injection](https://agentprime.io/advisories/CVE-2026-93967.md)
  `CVE-2026-93967` · CVE record: aiyiyi121 SxDevOps · CVSS 5.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection](https://agentprime.io/advisories/CVE-2026-93966.md)
  `CVE-2026-93966` · CVE record: aiyiyi121 SxDevOps · CVSS 5.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection](https://agentprime.io/advisories/CVE-2026-93965.md)
  `CVE-2026-93965` · CVE record: aiyiyi121 SxDevOps · CVSS 5.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Other injection, Command injection
- [D-Link R95 DHMAPI ssi system os command injection](https://agentprime.io/advisories/CVE-2026-93958.md)
  `CVE-2026-93958` · CVE record: D-Link R95 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Command injection
- [Totolink A3002MU formWsc command injection](https://agentprime.io/advisories/CVE-2026-93742.md)
  `CVE-2026-93742` · CVE record: Totolink A3002MU · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Sept 2026 · Tags: Other injection, Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84085.md)
  `CVE-2026-84085` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84071.md)
  `CVE-2026-84071` · CVE record: IBM Guardium Data Protection · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82892.md)
  `CVE-2026-82892` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82887.md)
  `CVE-2026-82887` · CVE record: IBM Guardium Data Protection · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-81937.md)
  `CVE-2026-81937` · CVE record: IBM Guardium Data Protection · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-81669.md)
  `CVE-2026-81669` · CVE record: IBM Guardium Data Protection · CVSS 7.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-81623.md)
  `CVE-2026-81623` · CVE record: IBM Guardium Data Protection · CVSS 6.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-80442.md)
  `CVE-2026-80442` · CVE record: IBM Guardium Data Protection · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP \[, \]](https://agentprime.io/advisories/CVE-2026-17262.md)
  `CVE-2026-17262` · CVE record: IBM i · CVSS 5.4 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [btrbk: SSH Command Filter Bypass in ssh_filter_btrbk.sh](https://agentprime.io/advisories/CVE-2026-62943.md)
  `CVE-2026-62943` · CVE record: digint btrbk · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection](https://agentprime.io/advisories/CVE-2026-93533.md)
  `CVE-2026-93533` · CVE record: spatie Scotty · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [IBM Cloud Pak for Data is vulnerable to OS command injection](https://agentprime.io/advisories/CVE-2025-14754.md)
  `CVE-2025-14754` · CVE record: IBM Cloud Pak for Data · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server](https://agentprime.io/advisories/CVE-2026-81942.md)
  `CVE-2026-81942` · CVE record: PLANET Technology Corp. PLANET IGS-5225-8P2T4S V1 and 1 more · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [Privilege Escalation via Argument Injection in NetBackup Flex OS Shell](https://agentprime.io/advisories/CVE-2026-28197.md)
  `CVE-2026-28197` · CVE record: Cohesity NetBackup Flex OS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection](https://agentprime.io/advisories/CVE-2026-93371.md)
  `CVE-2026-93371` · CVE record: marcopiovanello yt-dlp-web-ui · CVSS 6.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Other injection, Command injection
- [NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.](https://agentprime.io/advisories/CVE-2026-88622.md)
  `CVE-2026-88622` · CVE record · CVSS 8.8 High · Not analysed yet · Published 18 Sept 2026 · Tags: Command injection
- [Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-78501.md)
  `CVE-2026-78501` · CVE record: Microsoft Microsoft 365 Copilot's Business Chat · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, CWE-923
- [Microsoft 365 Copilot Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85885.md)
  `CVE-2026-85885` · CVE record: Microsoft Microsoft 365 Copilot · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [Microsoft Copilot Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55946.md)
  `CVE-2026-55946` · CVE record: Microsoft Microsoft Copilot · CVSS 6.1 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [JabRef CAYW Sublime Text integration permits operating-system command injection](https://agentprime.io/advisories/CVE-2026-53534.md)
  `CVE-2026-53534` · CVE record: JabRef jabref · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors](https://agentprime.io/advisories/CVE-2026-54501.md)
  `CVE-2026-54501` · CVE record: webrecorder browsertrix · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Privilege escalation, CWE-20
- [NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection](https://agentprime.io/advisories/CVE-2026-93337.md)
  `CVE-2026-93337` · CVE record: nm-l2tp NetworkManager-l2tp · CVSS 8.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection](https://agentprime.io/advisories/CVE-2026-92993.md)
  `CVE-2026-92993` · CVE record: Dromara mayfly-go · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [SSH.NET: ScpClient allows server-side RCE via default SCP path handling](https://agentprime.io/advisories/GHSA-mggc-4xg6-vcxf.md)
  `GHSA-mggc-4xg6-vcxf`, `CVE-2026-85756` · NuGet `SSH.NET`: affected `<2026.0.0`, fixed in `2026.0.0` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [mport package fetch and clean paths are vulnerable to TOCTOU filesystem races](https://agentprime.io/advisories/CVE-2026-54575.md)
  `CVE-2026-54575` · CVE record: MidnightBSD mport · CVSS 5.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Race condition
- [Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter](https://agentprime.io/advisories/CVE-2026-89036.md)
  `CVE-2026-89036` · CVE record: appwrite appwrite · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool](https://agentprime.io/advisories/CVE-2026-86864.md)
  `CVE-2026-86864` · CVE record: pgadmin.org pgAdmin 4 · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Path traversal, Command injection
- [pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools](https://agentprime.io/advisories/CVE-2026-86862.md)
  `CVE-2026-86862` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Hard-coded credentials, Server-side request forgery (SSRF)
- [@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows](https://agentprime.io/advisories/GHSA-q69g-4hcv-6jg4.md)
  `GHSA-q69g-4hcv-6jg4`, `CVE-2026-71538` · npm `@cyclonedx/cyclonedx-npm`: affected `<6.0.0`, fixed in `6.0.0` · CVSS 8.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [OS command injection in FatPipe Networks MPVPN and others](https://agentprime.io/advisories/CVE-2026-90822.md)
  `CVE-2026-90822` · CVE record: FatPipe Networks MPVPN and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [OS command injection in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81476.md)
  `CVE-2026-81476` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 8.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow authenticated users execute arbitrary OS command via concatenat…](https://agentprime.io/advisories/CVE-2026-52483.md)
  `CVE-2026-52483` · CVE record · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection
- [AVideo through 29.0 CloneSite Stored Shell Injection via SSH Password CSRF](https://agentprime.io/advisories/CVE-2026-92580.md)
  `CVE-2026-92580` · CVE record: WWBN AVideo · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20283.md)
  `CVE-2026-20283` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20350.md)
  `CVE-2026-20350` · CVE record: Cisco Cisco ThousandEyes Enterprise Agent · CVSS 4.7 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Identity Services Engine Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20176.md)
  `CVE-2026-20176` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command](https://agentprime.io/advisories/CVE-2026-20325.md)
  `CVE-2026-20325` · CVE record: Cisco Cisco Nexus Dashboard · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA5LTE2VDIwOjA2OjUwLjY0NDAwMFoiLCJDVkUtMjAyNi0yMDMyNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA5LTIyVDExOjU1OjMyLjgxMDAwMFoiLCJDVkUtMjAyNi03NDg0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA5LTIyVDExOjU1OjMyLjgxMDAwMFoiLCJDVkUtMjAyNi03NDg0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.