Command injection.

GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution

• Command injection

<3.1.54 · fixed in 3.1.54

GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks

• Command injection
• CWE-184

<3.1.54 · fixed in 3.1.54

GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)

• Command injection

<3.1.54 · fixed in 3.1.54

sysPass 3.2.11 Authenticated OS Command Injection via Backup Path

• nuxsmin sysPass
• Command injection

OS command injection in OpenStack Ironic Python Agent

• OpenStack Ironic Python Agent
• Command injection

9router before 0.4.60 Remote Code Execution via default password

• decolua 9router
• Command injection

cal.com Repository Takeover via pull_request_target Workflow

• calcom cal.diy
• Command injection

localstack serverless-localstack Configuration index.js os command injection

• serverless-localstack
• Command injection

Remote Code Execution

• Zohocorp ManageEngine ADAudit Plus
• Command injection

release-it conventional-changelog Changelog File index.js writeChangelog os command injection

• release-it conventional-changelog
• Command injection

bahmutov find-cypress-specs Branch index.js shell.exec os command injection

• bahmutov find-cypress-specs
• Command injection

Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update

• TUBITAK BILGEM Software Technologies Research Institute pardus-update
• Command injection

danger allows local OS command injection through crafted file paths

• Command injection

<13.0.8 · fixed in 13.0.8

publint package-manager pack.js child_process.exec os command injection

• publint
• Command injection

n8n: computer-use Shell Sandbox Not Enforced on Linux and Windows

• Command injection

<2.29.8 || >=2.30.0, <2.30.1 · fixed in 2.29.8, 2.30.1

syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

• syncfusion ej2-javascript-ui-controls
• Command injection

n8n: Authenticated code execution in the n8n Git node

• Command injection

<1.123.67 || >=2.0.0-rc.0, <2.31.5 || >=2.32.0, <2.32.1 · fixed in 1.123.67, 2.31.5, 2.32.1

oclif JIT Plugin Entry child_process.exec os command injection

• oclif
• Command injection

Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow

• MongoDB Compass
• Command injection

Duplicate Advisory: computer-use Shell Sandbox Not Enforced on Linux and Windows

• Command injection

* · no fixed version yet

Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings

• Red Hat Ansible Automation Platform 2
• Command injection

Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting

• Red Hat Ansible Automation Platform 2
• Command injection

Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename

• Red Hat Ansible Automation Platform 2
• Command injection

Supermicro SMASH service contain an Arbitrary code execution issue

• SMCI X14DBG-DAP,X14DBI
• Command injection

umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

• umi
• Command injection

jsforce SFDX Connection Registry sfdx.js _execCommand os command injection

• jsforce
• Command injection

QUSETIONS MiniCode-Python Project File config.py subprocess.Popen os command injection

• QUSETIONS MiniCode-Python
• Command injection

Command Injection via Malicious OCPP Server

• Autel MaxiCharger Single
• Command injection

Unauthenticated Command Injection

• Autel MaxiCharger Single
• Command injection

MeltanoHub vulnerable to command injection in the `test_dispatcher` GitHub Actions workflow

• meltano hub
• Command injection
• Code injection

Authenticated Command Injection allows arbitrary command execution in CLI Interface

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS)
• Command injection

GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`

• Command injection

<3.1.51 · fixed in 3.1.51

Command Injection

• Tenable, Inc. Security Center
• Command injection

Command Injection

• Tenable, Inc. Security Center
• Command injection

GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist

• Command injection
• CWE-184

<3.1.51 · fixed in 3.1.51

Command Injection

• Tenable, Inc. Security Center
• Command injection

aws-cdk-lib: OS Command Injection in NodejsFunction Docker Bundling

• Command injection

<2.260.0 · fixed in 2.260.0

Ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)

• Red Hat Satellite 6.17 for RHEL 9
• Red Hat Satellite 6.18 for RHEL 9
• Command injection

Git source checkout from a bundle file could lead to command injection

• moby BuildKit
• Command injection

D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

Libssh: libssh: information disclosure via proxycommand %r username expansion

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Command injection

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Command injection

OS command injection in Zyxel AX7501-B1 firmware

• Zyxel AX7501-B1 firmware
• Command injection

An issue was discovered in bytebot-ai in commit 3d37894ce07ef8d8b40adc7fd309ad96c2a71313 (2025-09-11) allowing attackers to execute arbitrary code via crafted path to `computer_write_file`.

• Command injection

AVideo before 29.0 OS Command Injection via execAsync

• WWBN AVideo
• Command injection

FreeRDP RDP File Parser Remote Code Execution via CLI Options

• FreeRDP
• Command injection

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

• Command injection

<12.3.0 · fixed in 12.3.0

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

• RVC-Boss GPT-SoVITS
• Command injection

Authenticated RCE in system_certificates view

• MB connect line mbCONNECT24
• MB connect line mymbCONNECT24
• Command injection

LiuMengxuan04 MiniCode mcp.ts child_process.spawn command injection

• LiuMengxuan04 MiniCode
• Other injection
• Command injection

Duplicate Advisory: SurrealDB server-takeover via SurrealQL injection on backup import

• Command injection

* · no fixed version yet

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

• IBM Langflow OSS
• Command injection

setup-php: Command Injection in Repository-Derived PHP Version Resolution

• shivammathur setup-php
• Command injection

Multiple Vulnerabilities in IBM Engineering AI hub.

• IBM Engineering AI Hub
• Command injection

An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component

• Command injection
• Code injection

django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model.

• Command injection

ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)

• Command injection
• Code injection

<26.7.2 · fixed in 26.7.2

Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection

• Command injection

>=2.0.1, <2.0.6 · fixed in 2.0.6

Pheditor has an authenticated terminal command whitelist bypass

• Command injection

<2.0.5 · fixed in 2.0.5

OS command injection in Lenovo XClarity Integrator for Microsoft Windows Admin Center

• Lenovo XClarity Integrator for Microsoft Windows Admin Center
• Command injection