# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting](https://agentprime.io/advisories/CVE-2026-112263.md)
  `CVE-2026-112263` · CVE record: alexpasmantier television · CVSS 8.5 High · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection
- [HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability](https://agentprime.io/advisories/CVE-2026-76740.md)
  `CVE-2026-76740` · CVE record: Hewlett Packard Enterprise HPE Compute Scale-up Server 3200 platform and 3 more · CVSS 7.2 High · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection
- [GV-ASManager Web Server Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-108983.md)
  `CVE-2026-108983` · CVE record: GeoVision Inc. GV-ASManager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Command injection
- [Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2024-4457.md)
  `CVE-2024-4457` · CVE record: WSO2 WSO2 Enterprise Integrator and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Oct 2026 · Tags: Command injection
- [alexpasmantier television entry.rs output command injection](https://agentprime.io/advisories/CVE-2026-111876.md)
  `CVE-2026-111876` · CVE record: alexpasmantier television · CVSS 4.8 Medium · Not analysed yet · Published 18 Oct 2026 · Tags: Other injection, Command injection
- [OS command injection in Tektronix 3 Series MDO](https://agentprime.io/advisories/CVE-2026-111853.md)
  `CVE-2026-111853` · CVE record: Tektronix 3 Series MDO · CVSS 8.8 High · Not analysed yet · Published 17 Oct 2026 · Tags: Command injection
- [Apache Kylin: spark job OS command injection](https://agentprime.io/advisories/CVE-2026-108743.md)
  `CVE-2026-108743` · CVE record: Apache Software Foundation Apache Kylin · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution](https://agentprime.io/advisories/GHSA-h4mw-j7qp-8mwm.md)
  `GHSA-h4mw-j7qp-8mwm`, `CVE-2026-96620` · PyPI `claude-agent-sdk`: affected `<0.2.121`, fixed in `0.2.121` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection, CWE-20
- [ZoneMinder: Authenticated RCE via command injection in monitor Device Path](https://agentprime.io/advisories/CVE-2026-30971.md)
  `CVE-2026-30971` · CVE record: ZoneMinder zoneminder · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)](https://agentprime.io/advisories/CVE-2026-102608.md)
  `CVE-2026-102608` · CVE record: ZoneMinder zoneminder · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature](https://agentprime.io/advisories/CVE-2026-102607.md)
  `CVE-2026-102607` · CVE record: ZoneMinder zoneminder · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore](https://agentprime.io/advisories/CVE-2026-92263.md)
  `CVE-2026-92263` · CVE record: CodeWithCJ SparkyFitness · CVSS 7.2 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [Libblockdev: libblockdev: argument injection in ntfs/vfat label-setting helpers via udisks2 setlabel() d-bus method](https://agentprime.io/advisories/CVE-2026-111581.md)
  `CVE-2026-111581` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 3 more · CVSS 3.3 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings](https://agentprime.io/advisories/CVE-2026-111728.md)
  `CVE-2026-111728` · CVE record: 5rahim Seanime · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass](https://agentprime.io/advisories/CVE-2026-104715.md)
  `CVE-2026-104715` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [WP Photo Album Plus <= 9.3.02.002 - Authenticated (Custom+) Command Injection via 'value' Parameter (crop item) in update-photo AJAX Action](https://agentprime.io/advisories/CVE-2026-92115.md)
  `CVE-2026-92115` · CVE record: opajaap WP Photo Album Plus · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [OS command injection in Wheels CLI](https://agentprime.io/advisories/CVE-2026-111451.md)
  `CVE-2026-111451` · CVE record: Wheels Wheels CLI · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection
- [Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers to execute arbitrary…](https://agentprime.io/advisories/CVE-2026-88755.md)
  `CVE-2026-88755` · CVE record · CVSS 7.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection, Information disclosure, Broken access control
- [mise permits untrusted local configuration to override default shell arguments](https://agentprime.io/advisories/GHSA-g74g-rg72-j2p3.md)
  `GHSA-g74g-rg72-j2p3`, `CVE-2026-103929` · crates.io `mise`: affected `<2026.7.14`, fixed in `2026.7.14` · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection, Broken access control
- [Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php](https://agentprime.io/advisories/CVE-2026-111226.md)
  `CVE-2026-111226` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh](https://agentprime.io/advisories/CVE-2026-111225.md)
  `CVE-2026-111225` · CVE record: Netgate pfSense CE · CVSS 2.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh](https://agentprime.io/advisories/CVE-2026-111224.md)
  `CVE-2026-111224` · CVE record: Netgate pfSense CE · CVSS 7.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters](https://agentprime.io/advisories/CVE-2026-111218.md)
  `CVE-2026-111218` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID](https://agentprime.io/advisories/CVE-2026-111217.md)
  `CVE-2026-111217` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP](https://agentprime.io/advisories/CVE-2026-111216.md)
  `CVE-2026-111216` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface](https://agentprime.io/advisories/CVE-2026-111215.md)
  `CVE-2026-111215` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php](https://agentprime.io/advisories/CVE-2026-111214.md)
  `CVE-2026-111214` · CVE record: Netgate pfSense CE · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip](https://agentprime.io/advisories/CVE-2026-55453.md)
  `CVE-2026-55453` · CVE record: OpenPrinting cups · CVSS 3.3 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Other injection, Command injection
- [Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')](https://agentprime.io/advisories/CVE-2026-45449.md)
  `CVE-2026-45449` · CVE record: Unitronics Unitronics UniStream Pro/UniLogic · CVSS 8.3 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer](https://agentprime.io/advisories/CVE-2026-57155.md)
  `CVE-2026-57155` · CVE record: opnsense core · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Path traversal, Command injection
- [Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection](https://agentprime.io/advisories/CVE-2026-110957.md)
  `CVE-2026-110957` · CVE record: Wavlink WL-WN530BE2-A · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [Pre-Authentication Command Injection](https://agentprime.io/advisories/CVE-2026-47786.md)
  `CVE-2026-47786` · CVE record: QNAP Systems Inc. HybridDesk Station · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [\*\*RCE\*\* Unsanitized \`X-Forwarded-For\` header passed to \`shell_exec()\` via broken IP validation fallback in \`getClientIP()\`](https://agentprime.io/advisories/CVE-2026-34007.md)
  `CVE-2026-34007` · CVE record: QNAP Systems Inc. Notes Station 3 · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [WebSocket timelapse path traversal and command injection](https://agentprime.io/advisories/CVE-2026-41545.md)
  `CVE-2026-41545` · CVE record: QNAP Systems Inc. QuMagie · CVSS 8.6 High · Not analysed yet · Published 15 Oct 2026 · Tags: Path traversal, Command injection
- [OS command injection in Netgate pfSense-pkg-frr](https://agentprime.io/advisories/CVE-2026-110908.md)
  `CVE-2026-110908` · CVE record: Netgate pfSense-pkg-frr · CVSS 8.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection
- [MoviePilot 3.1.5 Command Injection via ExecuteCommandTool](https://agentprime.io/advisories/CVE-2026-77931.md)
  `CVE-2026-77931` · CVE record: jxxghp MoviePilot · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection, CWE-1427
- [Cortex XSOAR: OS Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-0313.md)
  `CVE-2026-0313` · CVE record: Palo Alto Networks Cortex XSOAR OS Query and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [PAN-OS: Authenticated Admin Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-0320.md)
  `CVE-2026-0320` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [OS command injection in SonicWall Network Security Manager (NSM)](https://agentprime.io/advisories/CVE-2026-100232.md)
  `CVE-2026-100232` · CVE record: SonicWall Network Security Manager (NSM) · CVSS 7.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection](https://agentprime.io/advisories/CVE-2026-55679.md)
  `CVE-2026-55679` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, SQL injection, Code injection
- [Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows](https://agentprime.io/advisories/CVE-2026-54525.md)
  `CVE-2026-54525` · CVE record: shd101wyy vscode-markdown-preview-enhanced · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [D-Link DIR-868L HNAP CGI cgibin system os command injection](https://agentprime.io/advisories/CVE-2026-110536.md)
  `CVE-2026-110536` · CVE record: D-Link DIR-868L · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking](https://agentprime.io/advisories/CVE-2026-108390.md)
  `CVE-2026-108390` · CVE record: hestiacp hestiacp · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, Code injection, CWE-427
- [Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information](https://agentprime.io/advisories/CVE-2026-102059.md)
  `CVE-2026-102059` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled](https://agentprime.io/advisories/CVE-2026-102031.md)
  `CVE-2026-102031` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection](https://agentprime.io/advisories/CVE-2026-102079.md)
  `CVE-2026-102079` · CVE record: Juniper Networks Junos OS · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used](https://agentprime.io/advisories/CVE-2026-101967.md)
  `CVE-2026-101967` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used](https://agentprime.io/advisories/CVE-2026-101978.md)
  `CVE-2026-101978` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [nodejs-whisper allows OS command injection through crafted audio file paths](https://agentprime.io/advisories/GHSA-2f48-3555-fpx6.md)
  `GHSA-2f48-3555-fpx6`, `CVE-2026-110644` · npm `nodejs-whisper`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [git-diff: OS command injection vulnerability via crafted strings to the gitDiff API](https://agentprime.io/advisories/GHSA-6wfj-92cw-88vg.md)
  `GHSA-6wfj-92cw-88vg`, `CVE-2026-110634` · npm `git-diff`: affected `<2.0.7`, fixed in `2.0.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Gitea external renderer argument injection and code execution](https://agentprime.io/advisories/CVE-2026-73539.md)
  `CVE-2026-73539` · CVE record: Gitea Gitea · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Thumbnail through 1.5 OS Command Injection via generate_thumbnail File Paths](https://agentprime.io/advisories/CVE-2026-110650.md)
  `CVE-2026-110650` · CVE record: anshulkharb thumbnail · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Stills before 25.24.2 OS Command Injection via Media File Names](https://agentprime.io/advisories/CVE-2026-110649.md)
  `CVE-2026-110649` · CVE record: shahkashani stills · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [@offactory/compress-fonts before 1.1.1 OS Command Injection via Font File Names](https://agentprime.io/advisories/CVE-2026-110648.md)
  `CVE-2026-110648` · CVE record: adamarcanov compress-fonts · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names](https://agentprime.io/advisories/CVE-2026-110647.md)
  `CVE-2026-110647` · CVE record: jinghaihan turnpress · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Beganovich snappdf 1.1.0 before 6.1.0 OS Command Injection on Windows via setUrl()](https://agentprime.io/advisories/CVE-2026-110646.md)
  `CVE-2026-110646` · CVE record: beganovich snappdf · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Video-stitch before 2.0.0-beta.1 OS Command Injection via concat() and cut()](https://agentprime.io/advisories/CVE-2026-110645.md)
  `CVE-2026-110645` · CVE record: ArsalanDotMe video-stitch · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [transcribe2texts through 1.0.6 OS Command Injection via transcribeAudio audioPath](https://agentprime.io/advisories/CVE-2026-110643.md)
  `CVE-2026-110643` · CVE record: kky-ykk transcribe2texts · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name](https://agentprime.io/advisories/CVE-2026-110642.md)
  `CVE-2026-110642` · CVE record: xhtml2pdf xhtml2pdf · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [@runnerty/executor-decompress through 3.1.1 OS Command Injection via Archive File Name](https://agentprime.io/advisories/CVE-2026-110641.md)
  `CVE-2026-110641` · CVE record: runnerty @runnerty/executor-decompress · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTEwLTE0VDE0OjE3OjExLjk2NjAwMFoiLCJDVkUtMjAyNi0xMTA2NDEiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTEwLTE5VDEzOjU1OjE0LjQzMDAwMFoiLCJDVkUtMjAyNi0xMTIyNjQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTEwLTE5VDEzOjU1OjE0LjQzMDAwMFoiLCJDVkUtMjAyNi0xMTIyNjQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.