Command injection.

ImageMagick: Policy Bypass can read disallowed files via symlink

• Path traversal
• Command injection

<14.14.0 · fixed in 14.14.0

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

• vim
• Command injection
• Code injection

Vim: PowerShell Command Injection via Unescaped Filename in zip.vim Extraction

• vim
• Command injection

OS command injection in Schneider Electric PowerLogic™ P7

• Schneider Electric PowerLogic™ P7
• Command injection

OS command injection in Dell Display and Peripheral Manager

• Dell Display and Peripheral Manager
• Command injection

OS Command Injection in Rapid7 InsightConnect Tcpdump Plugin

• Rapid7 InsightConnect Tcpdump Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect Traceroute Plugin

• Rapid7 InsightConnect Traceroute Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect AWK Plugin

• Rapid7 InsightConnect AWK Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect Finger Plugin

• Rapid7 InsightConnect Finger Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect Translate Plugin

• Rapid7 InsightConnect TR Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect Ping Plugin

• Rapid7 InsightConnect Ping Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect Sed Plugin via expression parameter.

• Rapid7 InsightConnect Sed Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

• Rapid7 InsightConnect SQLmap Plugin
• Command injection

OS Command Injection in Rapid7 InsightConnect RPM Plugin

• Rapid7 InsightConnect RPM Plugin
• Command injection

Cacti: Command Injection via escape_command() no-op in RRDtool execution

• cacti
• Command injection

Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

• Quest NetVault Backup
• Command injection

Cacti: Unauthenticated RCE on Graph Image

• cacti
• Path traversal
• Command injection

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

• Unraid
• Command injection

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

• Unraid
• Command injection

Jellyfin: Potential FFmpeg argument injection via unescaped subtitle file path

• jellyfin
• Command injection

Warp branch selector command injection via Git branch names

• warp
• Command injection

Warp: Linux external editor command injection

• warp
• Command injection

Warp: Remote SSH cwd can lead to unauthorized remote command execution

• warp
• Command injection

Warp: DCS lifecycle hook spoofing can alter terminal session metadata

• warp
• Command injection

Warp: OS command injection when opening terminal links from WSL

• warp
• Command injection
• CWE-116

Warp: Command Injection via Warp code search tool arguments

• warp
• Command injection

Jenkins Git client Plugin has an OS command injection vulnerability on agents

• Command injection

<6.6.1 · fixed in 6.6.1

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit

• TortoiseGit
• Command injection

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

• GeoVision Inc. GV-I/O Box 4E
• Command injection

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

• GeoVision Inc. GV-I/O Box 4E
• Command injection

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

• GeoVision Inc. GV-I/O Box 4E
• Command injection

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

• GeoVision Inc. GV-I/O Box 4E
• Command injection

@rtk-ai/rtk-rewrite: OpenClaw Rewrite Plugin Command Injection via execSync Template String

• rtk
• Command injection

Mise's local credential_command executes untrusted config

• Command injection

>=2026.3.15, <2026.6.4 · fixed in 2026.6.4

Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository

• Command injection
• Code injection

<2026.6.4 · fixed in 2026.6.4

AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

• Command injection

<=29.0 · no fixed version yet

Gogs vulnerable to RCE via git rebase --exec argument injection in pull request merge

• Command injection

<0.14.3 · fixed in 0.14.3

Duplicate Advisory: ImageMagick: SVG-to-MVG Command Injection via coders/svg.c

• Command injection
• CWE-116

<14.10.3 · fixed in 14.10.3

NetComm NF20MESH < R6B032 Authenticated RCE via OS Command Injection

• NetComm Wireless Pty Ltd NF20MESH
• Command injection

skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

• Path traversal
• Command injection

<0.1.3 · fixed in 0.1.3

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

• Command injection

<4.5.5 · fixed in 4.5.5

Unauthenticated Command Injection via DHCP Option Handling in Multiple TP-Link Routers

• TP-Link Systems Inc. Archer MR200 v07
• TP-Link Systems Inc. Archer MR200 v8
• Command injection

coollabsio coolify Image Name os command injection

• coollabsio coolify
• Command injection

Comfast CF-WR631AX V3 API Endpoint mbox-config system os command injection

• Comfast CF-WR631AX V3
• Command injection

Edimax BR-6478AC V2 POST Request mp command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request stainfo command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request setWAN command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument

• Command injection

>=2.1.0, <5.0.0 · fixed in 5.0.0

Microsoft Copilot Tampering Vulnerability

• Microsoft 365 Copilot
• Command injection

gin-vue-admin vulnerable to RCE

• flipped-aurora gin-vue-admin
• Command injection

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

• Command injection

<2.0.14 · fixed in 2.0.14

agent-coderag: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

• Command injection

<1.3.1 · fixed in 1.3.1

Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()

• Command injection

>=1.1.3, <1.6.1 · fixed in 1.6.1

Authenticated OS Command Injection in Bondix

• SIMA GmbH Bondix Server
• Command injection

Network-AI: Improper Neutralization of Special Elements used in an OS Command

• Command injection

<5.9.1 · fixed in 5.9.1

pgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution

• pgadmin.org pgAdmin 4
• Command injection
• SQL injection

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

• Command injection

>=1.1.2, <1.1.6 · fixed in 1.1.6

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

• Command injection
• Privilege escalation

<2026.4.2 · fixed in 2026.4.2

OpenClaw: Exec allowlist could miss side effects from transparent command wrappers

• Command injection
• CWE-184

<2026.5.26 · fixed in 2026.5.26