Command injection.

Claude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret Exfiltration

• anthropics claude-code-action
• Command injection
• Information disclosure

AVideo through 29.0 OS Command Injection via ffmpeg.json.php

• WWBN AVideo
• Command injection

AVideo through 29.0 OS Command Injection via listFFmpegProcesses

• WWBN AVideo
• Command injection

Origin Validation Error in X-Rite MA-T6

• X-Rite MA-T6
• Command injection

GPT Researcher MCP STDIO configuration allows remote command execution

• Command injection

>=0.14.5, <=0.14.7 · no fixed version yet

systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

• Command injection

<5.31.7 · fixed in 5.31.7

Duplicate Advisory: Command Injection in jsii-diff via npm: package argument

• Command injection

<1.131.0 · fixed in 1.131.0

Wekan: Shell Injection via Avatar Upload

• wekan
• Command injection

MaaAssistantArknights: PR-title expression injection in release-preparation.yml

• MaaAssistantArknights
• Command injection
• Code injection

9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments

• decolua 9router
• Command injection

LangBot: Authenticated RCE Via MCP Configuration

• Command injection

<=4.10.5 · no fixed version yet

Metabase: Arbitrary File Read via MySQL Connection Property Injection

• metabase
• Command injection

Tabby: Drag-and-drop path injection still allows RCE via shell command substitution (incomplete fix for CVE-2026-45038)

• Eugeny tabby
• Command injection

Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

• Command injection

* · no fixed version yet

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality.

• Command injection

Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

• Adobe Animate 2023
• Adobe Animate 2024
• Command injection

Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

• Adobe Animate 2023
• Adobe Animate 2024
• Command injection

Windows Admin Center (WAC) Remote Code Execution Vulnerability

• Microsoft Windows Admin Center
• Command injection

Outlook Copilot Tampering Vulnerability

• Microsoft Copilot
• Command injection

Clipboard User Service Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Command injection

Windows Narrator Braille Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Command injection

Visual Studio Code Remote Code Execution Vulnerability

• Microsoft Visual Studio Code
• Command injection

Microsoft Edge Copilot Remote Code Execution Vulnerability

• Microsoft Edge Copilot for Android
• Microsoft Edge Copilot for IOS
• Command injection

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

• TP-Link Systems Inc. Archer VX1800v v1
• Command injection

OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v

• TP-Link Systems Inc. Archer VX1800v v1
• Command injection

Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection

• Dan-in-CA SIP
• Command injection

Apache Kylin: OS Command Injection via Async Query API

• Apache Software Foundation Apache Kylin
• Command injection

Remote Code Execution by administrative user on the Management Server

• Milestone Systems XProtect Management Server
• Command injection

mk_sap_hana: Privilege escalation via crafted sapstartsrv process name

• Checkmk
• Command injection

louisho5 picobot exec Tool exec.go ExecTool.Execute os command injection

• louisho5 picobot
• Command injection

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php

• VITEC Flamingo
• Command injection

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

• VITEC Flamingo
• Command injection

Command injection in NPC start web endpoint

• EVbee DC-80
• Command injection

Comnand injection in OCPP ReserveLogin message

• EVbee DC-80
• Command injection

Command injection in diagnosis web endpoint

• EVbee DC-80
• Command injection

Shibby Tomato CIFS Mount sub_2D048 os command injection

• Shibby Tomato
• Command injection

Shibby Tomato start_jffs2 sub_2D568 os command injection

• Shibby Tomato
• Command injection

Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection

• Wavlink WL-NU516U1
• Command injection

Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection

• Comfast CF-WR631AX V3
• Command injection

SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection

• SonicCloudOrg sonic-agent
• Command injection

SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection

• SonicCloudOrg sonic-agent
• Command injection

TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection

• TRENDnet TEW-821DAP
• Command injection

TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection

• TRENDnet TEW-821DAP
• Command injection

TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection

• TRENDnet TEW-821DAP
• Command injection

Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection

• Trendnet TEW-635BRM
• Other injection
• Command injection

Code Engine <= 0.3.5 - Authenticated (Contributor+) Remote Code Execution

• tigroumeow Code Engine – PHP Snippets, AI Functions & Automation for WordPress
• Command injection

mcp-server-kubernetes argument injection can expose Kubernetes cluster credentials

• Command injection

<3.9.0 · fixed in 3.9.0

File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

• Command injection
• Authentication bypass

<2.63.6 · fixed in 2.63.6

HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management

• hestiacp
• Command injection

Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action

• Command injection

<=4.6.77 · no fixed version yet

MaxKB MCP tool import validation bypass allows post-authentication remote code execution

• 1Panel-dev MaxKB
• Command injection

OS command injection in Dell PowerFlex Manager

• Dell PowerFlex Manager
• Command injection

OS Command Injection in R-SOFT DMS

• R-SOFT SERWIS DMS
• Command injection

OS Command Injection in R-SOFT DMS

• R-SOFT SERWIS DMS
• Command injection

laravel-backup-restore has an OS Command Injection during database restore

• Command injection

<1.9.4 · fixed in 1.9.4

PAN-OS: Authenticated Command Injection in CLI

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• Command injection

Discourse: Remote code execution via pdf uploads

• discourse
• Command injection

Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

• coollabsio coolify
• Command injection

Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

• ruvnet ruflo
• Command injection
• Authentication bypass

Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection

• hoppscotch
• Command injection
• Broken access control