# Command injection.

Untrusted input reaching a shell or operating-system command. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86394.md)
  `CVE-2026-86394` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain Virtual Edition](https://agentprime.io/advisories/CVE-2026-86395.md)
  `CVE-2026-86395` · CVE record: Dell PowerProtect Data Domain Virtual Edition · CVSS 7.2 High · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86396.md)
  `CVE-2026-86396` · CVE record: Dell PowerProtect Data Domain · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection
- [OS command injection in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86399.md)
  `CVE-2026-86399` · CVE record: Dell PowerProtect Data Domain · CVSS 7.2 High · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection
- [Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi](https://agentprime.io/advisories/CVE-2013-20007.md)
  `CVE-2013-20007` · CVE record: Linksys WAG200G · CVSS 8.6 High · Not analysed yet · Published 28 Oct 2026 · Tags: Command injection
- [Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan](https://agentprime.io/advisories/GHSA-rjh2-4xgw-p2hj.md)
  `GHSA-rjh2-4xgw-p2hj`, `CVE-2026-116676`, `GO-2026-6871` · Go `github.com/runatlantis/atlantis`: affected `>=0.4.0, <0.47.1`, fixed in `0.47.1` · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Sunhillo SureLine OS Command Injection via networkDiag.cgi](https://agentprime.io/advisories/CVE-2026-112351.md)
  `CVE-2026-112351` · CVE record: Sunhillo Corporation SureLine · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305](https://agentprime.io/advisories/CVE-2026-102815.md)
  `CVE-2026-102815` · CVE record: TP-Link Systems Inc. RE305 v3 · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305](https://agentprime.io/advisories/CVE-2026-102814.md)
  `CVE-2026-102814` · CVE record: TP-Link Systems Inc. RE305 v3 · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.](https://agentprime.io/advisories/CVE-2026-108303.md)
  `CVE-2026-108303` · CVE record: Tanium Certificate Manager · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Tanium addressed an unauthorized code execution vulnerability in Threat Response.](https://agentprime.io/advisories/CVE-2026-108329.md)
  `CVE-2026-108329` · CVE record: Tanium Threat Response · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://agentprime.io/advisories/CVE-2026-104353.md)
  `CVE-2026-104353` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility](https://agentprime.io/advisories/CVE-2026-107672.md)
  `CVE-2026-107672` · CVE record: Autodesk Fusion Post Processor Utility · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [desmondmorris node-tesseract Command Builder tesseract.js process os command injection](https://agentprime.io/advisories/CVE-2026-117511.md)
  `CVE-2026-117511` · CVE record: desmondmorris node-tesseract · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation](https://agentprime.io/advisories/CVE-2026-90465.md)
  `CVE-2026-90465` · CVE record: WatchGuard Fireware OS · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection](https://agentprime.io/advisories/CVE-2026-93865.md)
  `CVE-2026-93865` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection, Authentication bypass, Broken access control
- [GitPython: arbitrary file read via attacker-controlled branch name in \`Head.checkout()\` (incomplete fix of CVE-2026-78679)](https://agentprime.io/advisories/GHSA-23mf-xhv8-69c2.md)
  `GHSA-23mf-xhv8-69c2`, `CVE-2026-110859` · PyPI `gitpython`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, Command injection, Information disclosure
- [GitPython Remote.pull() refspec bypasses the --upload-pack unsafe-option guard, enabling arbitrary command execution](https://agentprime.io/advisories/GHSA-f9j4-qggq-h239.md)
  `GHSA-f9j4-qggq-h239`, `CVE-2026-110858` · PyPI `gitpython`: affected `>=3.1.30, <3.2.0`, fixed in `3.2.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools](https://agentprime.io/advisories/CVE-2026-117573.md)
  `CVE-2026-117573` · CVE record: masc-ucsc hagent · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters](https://agentprime.io/advisories/CVE-2026-117569.md)
  `CVE-2026-117569` · CVE record: alishahid74 kali-gpt · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir](https://agentprime.io/advisories/CVE-2026-117568.md)
  `CVE-2026-117568` · CVE record: bitscorp-mcp mcp-ffmpeg · CVSS 7.3 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters](https://agentprime.io/advisories/CVE-2026-117567.md)
  `CVE-2026-117567` · CVE record: horw esp-mcp · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values](https://agentprime.io/advisories/CVE-2026-117561.md)
  `CVE-2026-117561` · CVE record: codefriar sf-mcp · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools](https://agentprime.io/advisories/CVE-2026-117560.md)
  `CVE-2026-117560` · CVE record: atxp gemini-cli-extension · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass](https://agentprime.io/advisories/CVE-2026-117559.md)
  `CVE-2026-117559` · CVE record: hyperb1iss droidmind · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status](https://agentprime.io/advisories/CVE-2026-117558.md)
  `CVE-2026-117558` · CVE record: ai-sdlc-framework ai-sdlc · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [OS command injection in Hitachi Energy CoreTec 5 and others](https://agentprime.io/advisories/CVE-2026-13162.md)
  `CVE-2026-13162` · CVE record: Hitachi Energy CoreTec 5 and 1 more · CVSS 7.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [iofogctl command injection via Controller provisioning response](https://agentprime.io/advisories/CVE-2026-113644.md)
  `CVE-2026-113644` · CVE record: Eclipse Foundation Eclipse ioFog · CVSS 5.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [OS Command Injection Vulnerability in HiRDB](https://agentprime.io/advisories/CVE-2026-82119.md)
  `CVE-2026-82119` · CVE record: Hitachi HiRDB Server Version 10 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability](https://agentprime.io/advisories/CVE-2026-65213.md)
  `CVE-2026-65213` · CVE record: SMCI MBD-X12SPI · CVSS 6.6 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Supermicro BMC's syslog feature contains a command injection vulnerability](https://agentprime.io/advisories/CVE-2026-16521.md)
  `CVE-2026-16521` · CVE record: SMCI MBD-X12STW-F · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series](https://agentprime.io/advisories/CVE-2026-111461.md)
  `CVE-2026-111461` · CVE record: Moxa OnCell G3150A-LTE Series · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Command injection
- [Apache Airflow SSH provider: SSHRemoteJobOperator: \`environment\` values are executed as shell on the remote host](https://agentprime.io/advisories/CVE-2026-111422.md)
  `CVE-2026-111422` · CVE record: Apache Software Foundation Apache Airflow SSH provider · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [TOTOLINK A950RG firewall.so apmib_set command injection](https://agentprime.io/advisories/CVE-2026-116506.md)
  `CVE-2026-116506` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Other injection, Command injection
- [TOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection](https://agentprime.io/advisories/CVE-2026-116505.md)
  `CVE-2026-116505` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Other injection, Command injection
- [TOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection](https://agentprime.io/advisories/CVE-2026-116504.md)
  `CVE-2026-116504` · CVE record: TOTOLINK A950RG · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Other injection, Command injection
- [Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection](https://agentprime.io/advisories/CVE-2026-116369.md)
  `CVE-2026-116369` · CVE record: Sunwood-ai-labs github-kanban-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [Avocent ACS8000 wsserver command injection](https://agentprime.io/advisories/CVE-2026-65184.md)
  `CVE-2026-65184` · CVE record: Vertiv Avocent ACS8000 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [Unauthenticated RCE Vulnerability in WolfProt interface implementation](https://agentprime.io/advisories/CVE-2026-59106.md)
  `CVE-2026-59106` · CVE record: WolfVision Cynap Pure (Next Gen), Cynap Bridge and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [Dolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter](https://agentprime.io/advisories/CVE-2026-116219.md)
  `CVE-2026-116219` · CVE record: Dolibarr dolibarr · CVSS 8.6 High · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [Z.ai Zcode Sed Command Filter os command injection](https://agentprime.io/advisories/CVE-2026-116118.md)
  `CVE-2026-116118` · CVE record: Z.ai Zcode · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [continuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection](https://agentprime.io/advisories/CVE-2026-116109.md)
  `CVE-2026-116109` · CVE record: continuedev Continue · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [QuantGeekDev docker-mcp docker_executor.py \_build_windows_command os command injection](https://agentprime.io/advisories/CVE-2026-116102.md)
  `CVE-2026-116102` · CVE record: QuantGeekDev docker-mcp · CVSS 5.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh.](https://agentprime.io/advisories/CVE-2026-36698.md)
  `CVE-2026-36698` · CVE record · CVSS 8.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: Command injection
- [dbcli mycli Whitelist source.py source_special_command_is_safe os command injection](https://agentprime.io/advisories/CVE-2026-116053.md)
  `CVE-2026-116053` · CVE record: dbcli mycli · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Command injection
- [Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection](https://agentprime.io/advisories/CVE-2026-115995.md)
  `CVE-2026-115995` · CVE record: Unitree Robotics Unitree Go2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2026 · Tags: Command injection
- [Travisun Opptrix Schedule API setup command injection](https://agentprime.io/advisories/CVE-2026-115969.md)
  `CVE-2026-115969` · CVE record: Travisun Opptrix · CVSS 6.9 Medium · Not analysed yet · Published 24 Oct 2026 · Tags: Other injection, Command injection
- [virtualenv: Bash prompt values can change meaning under older compatibility modes](https://agentprime.io/advisories/GHSA-6w3r-xr62-4xcp.md)
  `GHSA-6w3r-xr62-4xcp`, `BIT-virtualenv-2026-113723`, `CVE-2026-113723` · PyPI `virtualenv`: affected `<21.14.9`, fixed in `21.14.9` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)](https://agentprime.io/advisories/GHSA-cx6f-vjhg-g3cc.md)
  `GHSA-cx6f-vjhg-g3cc`, `BIT-virtualenv-2026-115586`, `CVE-2026-115586` · PyPI `virtualenv`: affected `>=21.14.9, <21.14.13`, fixed in `21.14.13` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function](https://agentprime.io/advisories/GHSA-fq6x-j3g6-xx83.md)
  `GHSA-fq6x-j3g6-xx83`, `CVE-2026-106765` · npm `@rog0x/mcp-docker-tools`: affected `<=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function](https://agentprime.io/advisories/GHSA-jwc4-922r-f2rw.md)
  `GHSA-jwc4-922r-f2rw`, `CVE-2026-106764` · npm `@rog0x/mcp-git-tools`: affected `<=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection, Code injection
- [@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions](https://agentprime.io/advisories/GHSA-2vq3-mpmf-9xgr.md)
  `GHSA-2vq3-mpmf-9xgr`, `CVE-2026-106763` · npm `@justice8096/sagemath-mcp-server`: affected `<=1.0.1`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [Cacti: Authenticated RCE on Data Input](https://agentprime.io/advisories/CVE-2026-39902.md)
  `CVE-2026-39902` · CVE record: Cacti cacti · CVSS 7.2 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root](https://agentprime.io/advisories/CVE-2026-114355.md)
  `CVE-2026-114355` · CVE record: DJI CrystalSky ZS600C · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root](https://agentprime.io/advisories/CVE-2026-114354.md)
  `CVE-2026-114354` · CVE record: DJI CrystalSky ZS600C · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection, Broken access control
- [Zimbra Collaboration Suite Local Privilege Escalation via zmmailboxdmgr JVM Argument Injection](https://agentprime.io/advisories/CVE-2026-50056.md)
  `CVE-2026-50056` · CVE record: Zimbra Zimbra Collaboration Suite · CVSS 7.8 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings](https://agentprime.io/advisories/CVE-2026-115726.md)
  `CVE-2026-115726` · CVE record: Aider-AI aider · CVSS 8.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [OS command injection in ASUS Router](https://agentprime.io/advisories/CVE-2026-75775.md)
  `CVE-2026-75775` · CVE record: ASUS Router · CVSS 7.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection
- [OS command injection in ASUS Router](https://agentprime.io/advisories/CVE-2026-75779.md)
  `CVE-2026-75779` · CVE record: ASUS Router · CVSS 8.6 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection, Cross-site request forgery (CSRF)
- [An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metachar…](https://agentprime.io/advisories/CVE-2026-52356.md)
  `CVE-2026-52356` · CVE record · CVSS 8.8 High · Not analysed yet · Published 23 Oct 2026 · Tags: Command injection

Newest: <https://agentprime.io/advisories/tag/command-injection.md>
Older: <https://agentprime.io/advisories/tag/command-injection.md?cursor=WyIyMDI2LTEwLTIzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MjM1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=command-injection&cursor=WyIyMDI2LTEwLTI4VDEwOjAxOjM1Ljk0MjAwMFoiLCJDVkUtMjAyNi04NjM3OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/command-injection/?cursor=WyIyMDI2LTEwLTI4VDEwOjAxOjM1Ljk0MjAwMFoiLCJDVkUtMjAyNi04NjM3OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.