# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OS command injection in PFU Limited Image Scanner Driver for Linux (fi Series) and others](https://agentprime.io/advisories/CVE-2026-78229.md)
  `CVE-2026-78229` · CVE record: PFU Limited Image Scanner Driver for Linux (fi Series) and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR](https://agentprime.io/advisories/CVE-2026-103056.md)
  `CVE-2026-103056` · CVE record: beenuar AiSOC · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute.](https://agentprime.io/advisories/CVE-2026-51870.md)
  `CVE-2026-51870` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [Ziroom ZHOME A0101 ping command injection](https://agentprime.io/advisories/CVE-2026-102794.md)
  `CVE-2026-102794` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 set_time_zone command injection](https://agentprime.io/advisories/CVE-2026-102793.md)
  `CVE-2026-102793` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 set_syslog command injection](https://agentprime.io/advisories/CVE-2026-102792.md)
  `CVE-2026-102792` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Other injection, Command injection
- [Improper neutralization of special elements used in an OS command ('OS command injection') in Anjvision YSSD-RTMP-H5](https://agentprime.io/advisories/CVE-2026-100292.md)
  `CVE-2026-100292` · CVE record: Anjvision YSSD-RTMP-H5 · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Authenticated Command Injection Vulnerabilities in HPE Networking Instant ON](https://agentprime.io/advisories/CVE-2026-76727.md)
  `CVE-2026-76727` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Unauthenticated Adjacent Command Injection Vulnerability in HPE Networking Instant ON APs Command Line Interface (CLI) Accessed by the PAPI Protocol](https://agentprime.io/advisories/CVE-2026-76724.md)
  `CVE-2026-76724` · CVE record: Hewlett Packard Enterprise (HPE) Instant ON · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84422.md)
  `CVE-2026-84422` · CVE record: IBM Guardium Data Protection · CVSS 7.2 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84436.md)
  `CVE-2026-84436` · CVE record: IBM Guardium Data Protection · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84440.md)
  `CVE-2026-84440` · CVE record: IBM Guardium Data Protection · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Akaunting before 2.1.31 OS Command Injection via app alias](https://agentprime.io/advisories/CVE-2022-51019.md)
  `CVE-2022-51019` · CVE record: akaunting akaunting · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Weblate: Mercurial argument injection via repository filenames allows authenticated command execution](https://agentprime.io/advisories/CVE-2026-86035.md)
  `CVE-2026-86035` · CVE record: WeblateOrg weblate · CVSS 8.5 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Apache DolphinScheduler: Command Injection in the Alert Script Plugin](https://agentprime.io/advisories/CVE-2026-82804.md)
  `CVE-2026-82804` · CVE record: Apache Software Foundation Apache DolphinScheduler · CVSS 8.8 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix](https://agentprime.io/advisories/CVE-2026-102437.md)
  `CVE-2026-102437` · CVE record: esengine DeepSeek-Reasonix · CVSS 7.8 High · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [MODSetter SurfSense MCP Connector Integration test command injection](https://agentprime.io/advisories/CVE-2026-102243.md)
  `CVE-2026-102243` · CVE record: MODSetter SurfSense · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Other injection, Command injection
- [Netcore NAP930 Network Tools CGI network_tools eval os command injection](https://agentprime.io/advisories/CVE-2026-102240.md)
  `CVE-2026-102240` · CVE record: Netcore NAP930 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [RaspAP raspap-webgui OpenVPN Configuration del_ovpncfg.php escapeshellcmd os command injection](https://agentprime.io/advisories/CVE-2026-101859.md)
  `CVE-2026-101859` · CVE record: RaspAP raspap-webgui · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [RaspAP raspap-webgui SSID Processing WiFiManager.php writeWpaSupplicant os command injection](https://agentprime.io/advisories/CVE-2026-101858.md)
  `CVE-2026-101858` · CVE record: RaspAP raspap-webgui · CVSS 5.1 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [mbailey VoiceMode <= 8.10.1 is vulnerable to OS Command Injection.](https://agentprime.io/advisories/CVE-2026-79535.md)
  `CVE-2026-79535` · CVE record · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Command injection
- [Ziroom ZHOME A0101 set_passwd command injection](https://agentprime.io/advisories/CVE-2026-101264.md)
  `CVE-2026-101264` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 set_online_client command injection](https://agentprime.io/advisories/CVE-2026-101263.md)
  `CVE-2026-101263` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 set_online_client command injection](https://agentprime.io/advisories/CVE-2026-101262.md)
  `CVE-2026-101262` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 firstSetup_wifi command injection](https://agentprime.io/advisories/CVE-2026-101261.md)
  `CVE-2026-101261` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 firstLogin command injection](https://agentprime.io/advisories/CVE-2026-101260.md)
  `CVE-2026-101260` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection](https://agentprime.io/advisories/CVE-2026-101187.md)
  `CVE-2026-101187` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter](https://agentprime.io/advisories/CVE-2026-87741.md)
  `CVE-2026-87741` · CVE record: Brainstorm Force ConvertPlus · CVSS 8.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [FreePBX: Authenticated API generatedocs Host Command Injection](https://agentprime.io/advisories/CVE-2026-75600.md)
  `CVE-2026-75600` · CVE record: FreePBX security-reporting · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Authenticated Command Injection in FreePBX UCP Interface](https://agentprime.io/advisories/CVE-2026-54674.md)
  `CVE-2026-54674` · CVE record: FreePBX security-reporting · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module](https://agentprime.io/advisories/CVE-2026-45562.md)
  `CVE-2026-45562` · CVE record: FreePBX security-reporting · CVSS 7.7 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [WatchGuard AP Command Injection in Internal Management API Allows Command Execution](https://agentprime.io/advisories/CVE-2026-86102.md)
  `CVE-2026-86102` · CVE record: WatchGuard WatchGuard AP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection, Broken access control
- [WatchGuard AP Authenticated Command Injection in Diagnostic CLI](https://agentprime.io/advisories/CVE-2026-87969.md)
  `CVE-2026-87969` · CVE record: WatchGuard WatchGuard AP · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-101076.md)
  `CVE-2026-101076` · CVE record: Netcore NR289-GE · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Netcore NR289-GE Location Time location_time.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-101075.md)
  `CVE-2026-101075` · CVE record: Netcore NR289-GE · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [macOS Exam4 Local Privilege Escalation via Command Injection](https://agentprime.io/advisories/CVE-2026-4556.md)
  `CVE-2026-4556` · CVE record: Extegrity Exam4 · CVSS 7.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [code-ollama: \`grep_search\` Command Injection via Unescaped \`$()\` Shell Substitution (CWE-78)](https://agentprime.io/advisories/GHSA-456v-xq2p-r4cj.md)
  `GHSA-456v-xq2p-r4cj` · npm `code-ollama`: affected `<0.36.1`, fixed in `0.36.1` · CVSS 7.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Netcore NR289-GE CGI ap_ip.cgi system os command injection](https://agentprime.io/advisories/CVE-2026-101072.md)
  `CVE-2026-101072` · CVE record: Netcore NR289-GE · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal](https://agentprime.io/advisories/CVE-2026-86330.md)
  `CVE-2026-86330` · CVE record: Red Hat Red Hat Openshift Data Foundation 4 · CVSS 7.2 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes](https://agentprime.io/advisories/CVE-2026-78424.md)
  `CVE-2026-78424` · CVE record: SUSE NeuVector · CVSS 8.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Apache Karaf: OS Command Injection in Child-Instance Launch (instance:\* / InstancesMBean)](https://agentprime.io/advisories/CVE-2026-91006.md)
  `CVE-2026-91006` · CVE record: Apache Software Foundation Apache Karaf · CVSS 8.8 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [OS command injection in BUFFALO INC. WSR-300HP and others](https://agentprime.io/advisories/CVE-2026-86530.md)
  `CVE-2026-86530` · CVE record: BUFFALO INC. WSR-300HP and 1 more · CVSS 8.6 High · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [aaPanel BaoTa Unzip panelTask.py panelTask.bt_task.\_unzip os command injection](https://agentprime.io/advisories/CVE-2026-101009.md)
  `CVE-2026-101009` · CVE record: aaPanel BaoTa · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [aaPanel BaoTa File Merge files.py merge_split_file command injection](https://agentprime.io/advisories/CVE-2026-101008.md)
  `CVE-2026-101008` · CVE record: aaPanel BaoTa · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Other injection, Command injection
- [aaPanel BaoTa Database Backup database.py InputSql os command injection](https://agentprime.io/advisories/CVE-2026-101007.md)
  `CVE-2026-101007` · CVE record: aaPanel BaoTa · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Netcore NBR200V2 Tools Ping network_tools system os command injection](https://agentprime.io/advisories/CVE-2026-101002.md)
  `CVE-2026-101002` · CVE record: Netcore NBR200V2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Netcore NBR200V2 Web Management network_tools eval os command injection](https://agentprime.io/advisories/CVE-2026-101001.md)
  `CVE-2026-101001` · CVE record: Netcore NBR200V2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection](https://agentprime.io/advisories/CVE-2026-100896.md)
  `CVE-2026-100896` · CVE record: TOTOLINK N150RT · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Sept 2026 · Tags: Command injection
- [Fleet Homebrew Cask OS Command Injection via Metadata](https://agentprime.io/advisories/CVE-2026-101045.md)
  `CVE-2026-101045` · CVE record: fleetdm fleet · CVSS 8.9 High · Not analysed yet · Published 27 Sept 2026 · Tags: Command injection
- [navi through 2.24.0 OS Command Injection via Cheatsheet Variables](https://agentprime.io/advisories/CVE-2026-101032.md)
  `CVE-2026-101032` · CVE record: denisidoro navi · CVSS 7.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Command injection
- [AzuraCast before 0.23.8 Command Injection via Streamer Username](https://agentprime.io/advisories/CVE-2026-100852.md)
  `CVE-2026-100852` · CVE record: AzuraCast AzuraCast · CVSS 8.7 High · Not analysed yet · Published 27 Sept 2026 · Tags: Command injection
- [Froxlor before 2.3.12 Command Injection via letsencryptchallengepath](https://agentprime.io/advisories/CVE-2026-100714.md)
  `CVE-2026-100714` · CVE record: froxlor froxlor · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection
- [OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via googlemeet.chrome](https://agentprime.io/advisories/CVE-2026-100599.md)
  `CVE-2026-100599` · CVE record: OpenClaw OpenClaw · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection
- [OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_PYTHON_ARGS](https://agentprime.io/advisories/CVE-2026-100570.md)
  `CVE-2026-100570` · CVE record: OpenClaw OpenClaw · CVSS 8.5 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection
- [OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrapper](https://agentprime.io/advisories/CVE-2026-100561.md)
  `CVE-2026-100561` · CVE record: OpenClaw OpenClaw · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection
- [OpenClaw before 2026.8.1 Command Injection via Escaped Newlines](https://agentprime.io/advisories/CVE-2026-100559.md)
  `CVE-2026-100559` · CVE record: OpenClaw OpenClaw · CVSS 8.6 High · Not analysed yet · Published 26 Sept 2026 · Tags: Command injection
- [CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers](https://agentprime.io/advisories/GHSA-wrvw-254r-wpmv.md)
  `GHSA-wrvw-254r-wpmv`, `CVE-2026-100368` · NuGet `AlastairLundy.CliInvoke.Specializations` and 1 more: affected `>=1.0.0-rc.1, <2.0.2`, fixed in `2.0.2` · CVSS 8.4 High · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection
- [CliInvoke: Argument Injection in Extensibility Runner Factory](https://agentprime.io/advisories/GHSA-j73w-8hfr-4gc9.md)
  `GHSA-j73w-8hfr-4gc9`, `CVE-2026-100369` · NuGet `AlastairLundy.CliInvoke` and 1 more: affected `>=2.0.0-alpha.1, <2.0.2`, fixed in `2.0.2` · CVSS 8.4 High · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection
- [Unauthenticated remote code execution through wikitext in ExternalData](https://agentprime.io/advisories/CVE-2026-100382.md)
  `CVE-2026-100382` · CVE record: Wikimedia Foundation Mediawiki - ExternalData Extension · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection
- [Networkmanager-sstp: networkmanager-sstp: local privilege escalation to root via shell injection in vpn profile fields](https://agentprime.io/advisories/CVE-2026-91838.md)
  `CVE-2026-91838` · CVE record: GNOME NetworkManager-sstp · CVSS 7.8 High · Not analysed yet · Published 25 Sept 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA5LTI1VDE3OjUxOjQ0LjM1NzAwMFoiLCJDVkUtMjAyNi05MTgzOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTA5LTMwVDAyOjE1OjExLjI1NjAwMFoiLCJDVkUtMjAyNi0xMDI4NzQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTA5LTMwVDAyOjE1OjExLjI1NjAwMFoiLCJDVkUtMjAyNi0xMDI4NzQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.