Command injection.

Command Injection Vulnerability in the ClearPass Policy Manager Client Software

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Command injection

Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Command injection

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

• Command injection
• Code injection

<0.30.0 · fixed in 0.30.0

OS command injection in Dell OpenManage Integration

• Dell OpenManage Integration
• Command injection

SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)

• microsoft simplechat
• Command injection
• Broken access control

Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key`

• microsoft UFO
• Command injection

Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injection

• microsoft UFO
• Command injection
• CWE-184

Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool

• microsoft UFO
• Command injection
• CWE-184

Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app

• microsoft UFO
• Command injection

OS Command Injection in Felisify Informatics' SambaBox

• Felisify Information Technologies Industry and Trade Inc. SambaBox
• Command injection

OS command injection in Progress Software Autonomous REST Connector GenAI Agents

• Progress Software Autonomous REST Connector GenAI Agents
• Command injection

shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

• Command injection

>=1.8.4, <1.11.0 · fixed in 1.11.0

lrzsz before 0.13.0 OS Command Injection via lrz Pipe Mode

• Uwe Ohse lrzsz
• Command injection

yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection

• yogeshojha reNgine
• Command injection

TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

• TOTOLINK X6000R
• Command injection

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

• Command injection
• CWE-184

<2.0.1 · fixed in 2.0.1

simple-git unsafe-operation guard does not block trailer command configuration

• Command injection
• CWE-184

>=3.15.0, <4.0.1 · fixed in 4.0.1

simple-git allows command execution through unblocked Git configuration includes

• Command injection

<4.0.0 · fixed in 4.0.0

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

• Command injection

<4.0.0 · fixed in 4.0.0

@nx/docker: OS command injection in the @nx/docker release pipeline

• Command injection

>=21.4.0, <22.7.8 || >=23.0.0, <23.1.1 · fixed in 22.7.8, 23.1.1

Nx: OS command injection via git revisions and remote refs

• Command injection

>=14.0.0, <22.7.8 || >=23.0.0, <23.1.1 · fixed in 22.7.8, 23.1.1

Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

• langflow
• Command injection

Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color

• penpot
• Command injection

Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands

• Chainguard Academy (edu)
• Command injection

Cups: cups: argument injection in mailto notifier via notify-recipient-uri

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Command injection

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

• cookpete auto-changelog
• Path traversal
• Command injection

Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection

• AhsayCBS
• Command injection

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

• Command injection
• Code injection

>=0.1.0, <0.1.7 · fixed in 0.1.7

OS Command Injection in Digi Accelerated Linux (DAL OS)

• Digi International IX Family
• Digi International EX Family
• Command injection

OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio

• AWS sagemaker-distribution
• Command injection

Argument Injection leading to arbitrary process termination in gotop

• cjbassi gotop
• Command injection

OS command injection in Webpros cPanel and others

• Webpros cPanel
• Webpros WP Squared
• Command injection

OS command injection in Johnson Controls EasyIO FS32

• Johnson Controls EasyIO FS32
• Command injection

OS command injection in Johnson Controls EasyIO FS32

• Johnson Controls EasyIO FS32
• Command injection

TDDPv2 setProductVer Command Injection in Archer AX90

• TP-Link Systems Inc. Archer AX90 v1
• Command injection

Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

• AWS security-agent-mcp-server
• Path traversal
• Command injection

Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

• TP-Link System Inc. TL-WR841N v14
• Command injection

Foreman: command injection in foreman-tail

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Rubygem-hammer_cli: command injection via insecure editor invocation

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: command injection in foreman-rake database tasks

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Foreman: command injection in foreman-rake errors:fetch_log via request_id parameter

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Command injection

AWS EFS CSI Driver Mount Option Injection via mounttargetipmap

• aws-efs-csi-driver
• Command injection

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

• Command injection
• Information disclosure

>=4.0.0, <4.5.11 || >=4.6.0, <4.6.4 · fixed in 4.5.11, 4.6.4

virtualenv bash and fish activation scripts execute commands embedded in paths

• Command injection

<21.7.13 · fixed in 21.7.13

virtualenv: Command injection via --prompt in activate.bat (batch activator)

• Command injection

<21.7.12 · fixed in 21.7.12

Fortra BoKS Manager crlserver command injection vulnerability

• Fortra BoKS Manager
• Command injection

Genians, Inc Genian SSL PNS OS Command Injection

• Genians, Inc Genian SSL PNS (xenics_auther)
• Command injection

GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle

• Command injection
• Information disclosure

>=3.1.59, <3.1.60 · fixed in 3.1.60

Kiteworks Core Local Privilege Escalation

• Kiteworks Core
• Command injection
• Privilege escalation

Kiteworks Core OS Command Injection

• Kiteworks Core
• Command injection

Kiteworks Core OS Command Injection

• Kiteworks Core
• Command injection
• Privilege escalation

Kiteworks Core Arbitrary File Write through Command Injection

• Kiteworks Core
• Command injection

Kiteworks Core OS command injection

• Kiteworks Core
• Command injection

Deno 2.7.0 through 2.9.7 Command Injection via node:child_process

• deno
• Command injection

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

• Command injection
• Cross-site scripting (XSS)

>=1.3.0, <2.10.2 · fixed in 2.10.2

OS command injection in JetBrains TeamCity

• JetBrains TeamCity
• Command injection

zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os command injection

• zosmaai pi-llm-wiki
• Command injection

0xshariq github-mcp-server Git Remove MCP Tool github.ts child_process.exec os command injection

• 0xshariq github-mcp-server
• Command injection

HKUDS AnyTool Execute Endpoint main.py subprocess.run os command injection

• HKUDS AnyTool
• Command injection