# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Command Injection Vulnerability in the ClearPass Policy Manager Client Software](https://agentprime.io/advisories/CVE-2026-79802.md)
  `CVE-2026-79802` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager](https://agentprime.io/advisories/CVE-2026-76754.md)
  `CVE-2026-76754` · CVE record: Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json](https://agentprime.io/advisories/GHSA-mc52-mwq4-vfx3.md)
  `GHSA-mc52-mwq4-vfx3`, `CVE-2026-86540` · npm `knowns`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 8.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, Code injection, CWE-427, CWE-829
- [OS command injection in Dell OpenManage Integration](https://agentprime.io/advisories/CVE-2026-101207.md)
  `CVE-2026-101207` · CVE record: Dell OpenManage Integration · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)](https://agentprime.io/advisories/CVE-2026-105797.md)
  `CVE-2026-105797` · CVE record: microsoft simplechat · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, Broken access control
- [Microsoft UFO: Authenticated Android shell command injection in Mobile MCP \`press_key\`](https://agentprime.io/advisories/CVE-2026-105793.md)
  `CVE-2026-105793` · CVE record: microsoft UFO · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [Microsoft UFO: Arbitrary code execution in \`run_shell\` via \`explorer.exe\` argument injection](https://agentprime.io/advisories/CVE-2026-105791.md)
  `CVE-2026-105791` · CVE record: microsoft UFO · CVSS 7.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, CWE-184
- [Microsoft UFO: Arbitrary file write in the Linux MCP \`execute_command\` tool](https://agentprime.io/advisories/CVE-2026-105789.md)
  `CVE-2026-105789` · CVE record: microsoft UFO · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, CWE-184
- [Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app](https://agentprime.io/advisories/CVE-2026-105788.md)
  `CVE-2026-105788` · CVE record: microsoft UFO · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [OS Command Injection in Felisify Informatics' SambaBox](https://agentprime.io/advisories/CVE-2026-85523.md)
  `CVE-2026-85523` · CVE record: Felisify Information Technologies Industry and Trade Inc. SambaBox · CVSS 8.8 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [OS command injection in Progress Software Autonomous REST Connector GenAI Agents](https://agentprime.io/advisories/CVE-2026-91140.md)
  `CVE-2026-91140` · CVE record: Progress Software Autonomous REST Connector GenAI Agents · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [shell-quote: \`quote()\` command injection via a line terminator in a token after a \`{ comment }\` token](https://agentprime.io/advisories/GHSA-pqg4-j6r4-53mv.md)
  `GHSA-pqg4-j6r4-53mv`, `CVE-2026-102422` · npm `shell-quote`: affected `>=1.8.4, <1.11.0`, fixed in `1.11.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode](https://agentprime.io/advisories/CVE-2026-105841.md)
  `CVE-2026-105841` · CVE record: Uwe Ohse lrzsz · CVSS 7.7 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection](https://agentprime.io/advisories/CVE-2026-105487.md)
  `CVE-2026-105487` · CVE record: yogeshojha reNgine · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection](https://agentprime.io/advisories/CVE-2026-105484.md)
  `CVE-2026-105484` · CVE record: TOTOLINK X6000R · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection
- [simple-git: \`VISUAL\` editor environment variable is omitted from unsafe editor detection](https://agentprime.io/advisories/GHSA-v5rq-49vh-5v5c.md)
  `GHSA-v5rq-49vh-5v5c`, `CVE-2026-102829` · npm `@simple-git/argv-parser`: affected `<2.0.1`, fixed in `2.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184
- [simple-git unsafe-operation guard does not block trailer command configuration](https://agentprime.io/advisories/GHSA-x6jw-m9v5-85vh.md)
  `GHSA-x6jw-m9v5-85vh`, `CVE-2026-102828` · npm `simple-git`: affected `>=3.15.0, <4.0.1`, fixed in `4.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection, CWE-184
- [simple-git allows command execution through unblocked Git configuration includes](https://agentprime.io/advisories/GHSA-g4wm-2vf7-vfgr.md)
  `GHSA-g4wm-2vf7-vfgr`, `CVE-2026-102826` · npm `simple-git`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 8.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)](https://agentprime.io/advisories/GHSA-858h-whjf-mvg5.md)
  `GHSA-858h-whjf-mvg5`, `CVE-2026-102827` · npm `simple-git`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 8.1 High · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [@nx/docker: OS command injection in the @nx/docker release pipeline](https://agentprime.io/advisories/GHSA-6vc5-vf29-ffr2.md)
  `GHSA-6vc5-vf29-ffr2`, `CVE-2026-104859` · npm `@nx/docker`: affected `>=21.4.0, <22.7.8 || >=23.0.0, <23.1.1`, fixed in `22.7.8`, `23.1.1` · CVSS 7.3 High · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [Nx: OS command injection via git revisions and remote refs](https://agentprime.io/advisories/GHSA-w2vw-w76x-qr89.md)
  `GHSA-w2vw-w76x-qr89` · npm `nx`: affected `>=14.0.0, <22.7.8 || >=23.0.0, <23.1.1`, fixed in `22.7.8`, `23.1.1` · CVSS 4.0, no score published · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server](https://agentprime.io/advisories/CVE-2026-105740.md)
  `CVE-2026-105740` · CVE record: langflow-ai langflow · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color](https://agentprime.io/advisories/CVE-2026-105691.md)
  `CVE-2026-105691` · CVE record: penpot penpot · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands](https://agentprime.io/advisories/CVE-2026-105767.md)
  `CVE-2026-105767` · CVE record: Chainguard Chainguard Academy (edu) · CVSS 2.1 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [Cups: cups: argument injection in mailto notifier via notify-recipient-uri](https://agentprime.io/advisories/CVE-2026-105326.md)
  `CVE-2026-105326` · CVE record: Red Hat Red Hat Hardened Images and 3 more · CVSS 2.5 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Command injection
- [auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF](https://agentprime.io/advisories/CVE-2026-12171.md)
  `CVE-2026-12171` · CVE record: cookpete auto-changelog · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, Command injection, Code injection, Server-side request forgery (SSRF)
- [Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection](https://agentprime.io/advisories/CVE-2026-105134.md)
  `CVE-2026-105134` · CVE record: Ahsay AhsayCBS · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.82 · Not analysed yet · Published 4 Oct 2026 · Tags: Command injection
- [Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF](https://agentprime.io/advisories/GHSA-jqmf-mx4f-hfr6.md)
  `GHSA-jqmf-mx4f-hfr6`, `CVE-2026-114107` · PyPI `vibe-trading-ai`: affected `>=0.1.0, <0.1.7`, fixed in `0.1.7` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection, Code injection, Server-side request forgery (SSRF), CWE-116
- [OS Command Injection in Digi Accelerated Linux (DAL OS)](https://agentprime.io/advisories/CVE-2026-75937.md)
  `CVE-2026-75937` · CVE record: Digi International IX Family and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection
- [OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio](https://agentprime.io/advisories/CVE-2026-104019.md)
  `CVE-2026-104019` · CVE record: AWS sagemaker-distribution · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection
- [Argument Injection leading to arbitrary process termination in gotop](https://agentprime.io/advisories/CVE-2026-91784.md)
  `CVE-2026-91784` · CVE record: cjbassi gotop · CVSS 4.8 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection
- [OS command injection in Webpros cPanel and others](https://agentprime.io/advisories/CVE-2026-93698.md)
  `CVE-2026-93698` · CVE record: Webpros cPanel and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection
- [OS command injection in Johnson Controls EasyIO FS32](https://agentprime.io/advisories/CVE-2026-71452.md)
  `CVE-2026-71452` · CVE record: Johnson Controls EasyIO FS32 · CVSS 7.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [OS command injection in Johnson Controls EasyIO FS32](https://agentprime.io/advisories/CVE-2026-71451.md)
  `CVE-2026-71451` · CVE record: Johnson Controls EasyIO FS32 · CVSS 5.6 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [TDDPv2 setProductVer Command Injection in Archer AX90](https://agentprime.io/advisories/CVE-2026-84682.md)
  `CVE-2026-84682` · CVE record: TP-Link Systems Inc. Archer AX90 v1 · CVSS 7.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace](https://agentprime.io/advisories/CVE-2026-97662.md)
  `CVE-2026-97662` · CVE record: AWS security-agent-mcp-server · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Path traversal, Command injection
- [Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration](https://agentprime.io/advisories/CVE-2026-102294.md)
  `CVE-2026-102294` · CVE record: TP-Link System Inc. TL-WR841N v14 · CVSS 8.5 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Foreman: command injection in foreman-tail](https://agentprime.io/advisories/CVE-2026-12542.md)
  `CVE-2026-12542` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Rubygem-hammer_cli: command injection via insecure editor invocation](https://agentprime.io/advisories/CVE-2026-12545.md)
  `CVE-2026-12545` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Foreman: command injection in foreman-rake database tasks](https://agentprime.io/advisories/CVE-2026-12541.md)
  `CVE-2026-12541` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter](https://agentprime.io/advisories/CVE-2026-12540.md)
  `CVE-2026-12540` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.2 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter](https://agentprime.io/advisories/CVE-2026-12405.md)
  `CVE-2026-12405` · CVE record: Red Hat Red Hat Satellite 6.16 for RHEL 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [AWS EFS CSI Driver Mount Option Injection via mounttargetipmap](https://agentprime.io/advisories/CVE-2026-103505.md)
  `CVE-2026-103505` · CVE record: AWS aws-efs-csi-driver · CVSS 6.9 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs](https://agentprime.io/advisories/GHSA-3325-v43h-43rv.md)
  `GHSA-3325-v43h-43rv`, `BIT-jupyterlab-2026-102904`, `CVE-2026-102904`, `PYSEC-2026-4055` · PyPI `jupyterlab`: affected `>=4.0.0, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 5.4 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection, Information disclosure, Server-side request forgery (SSRF)
- [virtualenv bash and fish activation scripts execute commands embedded in paths](https://agentprime.io/advisories/GHSA-p58f-9548-mpm2.md)
  `GHSA-p58f-9548-mpm2`, `BIT-virtualenv-2026-102925`, `CVE-2026-102925`, `PYSEC-2026-4013` · PyPI `virtualenv`: affected `<21.7.13`, fixed in `21.7.13` · CVSS 7.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [virtualenv: Command injection via --prompt in activate.bat (batch activator)](https://agentprime.io/advisories/GHSA-x78j-v8h9-3j2q.md)
  `GHSA-x78j-v8h9-3j2q`, `BIT-virtualenv-2026-102937`, `CVE-2026-102937`, `PYSEC-2026-4014` · PyPI `virtualenv`: affected `<21.7.12`, fixed in `21.7.12` · CVSS 7.3 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Fortra BoKS Manager crlserver command injection vulnerability](https://agentprime.io/advisories/CVE-2026-79898.md)
  `CVE-2026-79898` · CVE record: Fortra BoKS Manager · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [Genians, Inc Genian SSL PNS OS Command Injection](https://agentprime.io/advisories/CVE-2026-76146.md)
  `CVE-2026-76146` · CVE record: Genians, Inc Genian SSL PNS (xenics_auther) · CVSS 8.4 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle](https://agentprime.io/advisories/GHSA-whh4-5q6c-9v3x.md)
  `GHSA-whh4-5q6c-9v3x`, `CVE-2026-87818`, `PYSEC-2026-3983` · PyPI `gitpython`: affected `>=3.1.59, <3.1.60`, fixed in `3.1.60` · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection, Information disclosure
- [Kiteworks Core Local Privilege Escalation](https://agentprime.io/advisories/CVE-2026-102112.md)
  `CVE-2026-102112` · CVE record: Kiteworks Core · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection, Privilege escalation
- [Kiteworks Core OS Command Injection](https://agentprime.io/advisories/CVE-2026-102114.md)
  `CVE-2026-102114` · CVE record: Kiteworks Core · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [Kiteworks Core OS Command Injection](https://agentprime.io/advisories/CVE-2026-102120.md)
  `CVE-2026-102120` · CVE record: Kiteworks Core · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection, Privilege escalation
- [Kiteworks Core Arbitrary File Write through Command Injection](https://agentprime.io/advisories/CVE-2026-102133.md)
  `CVE-2026-102133` · CVE record: Kiteworks Core · CVSS 6.6 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [Kiteworks Core OS command injection](https://agentprime.io/advisories/CVE-2026-102096.md)
  `CVE-2026-102096` · CVE record: Kiteworks Core · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [Deno 2.7.0 through 2.9.7 Command Injection via node:child_process](https://agentprime.io/advisories/CVE-2026-103473.md)
  `CVE-2026-103473` · CVE record: denoland deno · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal](https://agentprime.io/advisories/GHSA-97jj-33gv-5xf9.md)
  `GHSA-97jj-33gv-5xf9`, `CVE-2026-105829`, `PKSA-m2dq-1fhr-29b1` · Packagist `league/commonmark`: affected `>=1.3.0, <2.10.2`, fixed in `2.10.2` · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection, Cross-site scripting (XSS)
- [OS command injection in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2026-100254.md)
  `CVE-2026-100254` · CVE record: JetBrains TeamCity · CVSS 8.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection](https://agentprime.io/advisories/CVE-2026-102911.md)
  `CVE-2026-102911` · CVE record: zosmaai pi-llm-wiki · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection](https://agentprime.io/advisories/CVE-2026-102906.md)
  `CVE-2026-102906` · CVE record: 0xshariq github-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection
- [HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection](https://agentprime.io/advisories/CVE-2026-102874.md)
  `CVE-2026-102874` · CVE record: HKUDS AnyTool · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTA5LTMwVDAyOjE1OjExLjI1NjAwMFoiLCJDVkUtMjAyNi0xMDI4NzQiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTEwLTA2VDE5OjE3OjA2Ljk0MDAwMFoiLCJDVkUtMjAyNi03OTgwMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTEwLTA2VDE5OjE3OjA2Ljk0MDAwMFoiLCJDVkUtMjAyNi03OTgwMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.