agentprime: Command injection

agentprime: Command injectionEvery new Command injection Advisory and CVE.https://agentprime.io/CVE-2026-113663: AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command executionhttps://agentprime.io/advisories/CVE-2026-113663/https://agentprime.io/advisories/CVE-2026-113663/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:53:40 GMTCVECVE-2026-110930: Argument injection in OpenAI Codex Desktop for Windows and othershttps://agentprime.io/advisories/CVE-2026-110930/https://agentprime.io/advisories/CVE-2026-110930/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:55:30 GMTCVECVE-2026-116779: FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandshttps://agentprime.io/advisories/CVE-2026-116779/https://agentprime.io/advisories/CVE-2026-116779/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:30:25 GMTCVEcriticalCVE-2026-116786: FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiahttps://agentprime.io/advisories/CVE-2026-116786/https://agentprime.io/advisories/CVE-2026-116786/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 19:25:23 GMTCVECVE-2026-54143: OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executionhttps://agentprime.io/advisories/CVE-2026-54143/https://agentprime.io/advisories/CVE-2026-54143/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:40:23 GMTCVEcriticalCVE-2026-82413: ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)https://agentprime.io/advisories/CVE-2026-82413/https://agentprime.io/advisories/CVE-2026-82413/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:04:14 GMTCVECVE-2026-123022: agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injectionhttps://agentprime.io/advisories/CVE-2026-123022/https://agentprime.io/advisories/CVE-2026-123022/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:15:23 GMTCVECVE-2026-118869: OS command injection in SHIRASAGIhttps://agentprime.io/advisories/CVE-2026-118869/https://agentprime.io/advisories/CVE-2026-118869/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 08:17:57 GMTCVECVE-2026-123025: OS command injection in OPNsense os-acme-clienthttps://agentprime.io/advisories/CVE-2026-123025/https://agentprime.io/advisories/CVE-2026-123025/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 06:29:05 GMTCVEcriticalCVE-2026-123014: Argument injection in iTerm2https://agentprime.io/advisories/CVE-2026-123014/https://agentprime.io/advisories/CVE-2026-123014/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 05:25:55 GMTCVECVE-2026-122157: Purocean Yank Note Terminal index.ts checkPermission os command injectionhttps://agentprime.io/advisories/CVE-2026-122157/https://agentprime.io/advisories/CVE-2026-122157/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 01:45:55 GMTCVECVE-2026-122051: Edimax BR-6208AC mp command injectionhttps://agentprime.io/advisories/CVE-2026-122051/https://agentprime.io/advisories/CVE-2026-122051/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 23:45:18 GMTCVEcriticalCVE-2026-108387: radare2: Remote code execution when loading Pebble/SMD binaryhttps://agentprime.io/advisories/CVE-2026-108387/https://agentprime.io/advisories/CVE-2026-108387/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:26:59 GMTCVECVE-2026-76826: tsParticles: Generated release notes can execute shell commands in the stable publish workflowhttps://agentprime.io/advisories/CVE-2026-76826/https://agentprime.io/advisories/CVE-2026-76826/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 22:11:45 GMTCVECVE-2026-121749: nvm passes the version pattern to grep without -e, letting a .nvmrc inject grep options and read local fileshttps://agentprime.io/advisories/CVE-2026-121749/https://agentprime.io/advisories/CVE-2026-121749/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:31:15 GMTCVECVE-2026-121751: nvm evaluates a malicious mirror's index.tab version strings as shell arithmetic via stored LTS aliaseshttps://agentprime.io/advisories/CVE-2026-121751/https://agentprime.io/advisories/CVE-2026-121751/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:26:57 GMTCVECVE-2026-97693: Yuxi sandbox isolation failure allows cross-tenant access and internal service compromisehttps://agentprime.io/advisories/CVE-2026-97693/https://agentprime.io/advisories/CVE-2026-97693/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:14:50 GMTCVEcriticalCVE-2026-121932: Linksys E5350 apply.cgi system os command injectionhttps://agentprime.io/advisories/CVE-2026-121932/https://agentprime.io/advisories/CVE-2026-121932/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:00:19 GMTCVEcriticalCVE-2026-121931: Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injectionhttps://agentprime.io/advisories/CVE-2026-121931/https://agentprime.io/advisories/CVE-2026-121931/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:45:14 GMTCVEcriticalCVE-2026-121930: Linksys WRT54GL Ping Diagnostic apply.cgi system os command injectionhttps://agentprime.io/advisories/CVE-2026-121930/https://agentprime.io/advisories/CVE-2026-121930/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:30:11 GMTCVEcriticalCVE-2026-77690: Command injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77690/https://agentprime.io/advisories/CVE-2026-77690/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 05:41:25 GMTCVEcriticalCVE-2026-121608: Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injectionhttps://agentprime.io/advisories/CVE-2026-121608/https://agentprime.io/advisories/CVE-2026-121608/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 01:30:29 GMTCVECVE-2026-121607: Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injectionhttps://agentprime.io/advisories/CVE-2026-121607/https://agentprime.io/advisories/CVE-2026-121607/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 01:15:39 GMTCVEcriticalCVE-2026-116650: Tanium addressed an unauthorized code execution vulnerability in Threat Response.https://agentprime.io/advisories/CVE-2026-116650/https://agentprime.io/advisories/CVE-2026-116650/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:18:00 GMTCVECVE-2026-116651: Tanium addressed an unauthorized code execution vulnerability in Threat Response.https://agentprime.io/advisories/CVE-2026-116651/https://agentprime.io/advisories/CVE-2026-116651/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:16:44 GMTCVECVE-2026-118865: Authenticated OS Command Injection in Archer AX3000 v2 Offline Download Componenthttps://agentprime.io/advisories/CVE-2026-118865/https://agentprime.io/advisories/CVE-2026-118865/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 21:56:54 GMTCVECVE-2026-121621: Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy configurationhttps://agentprime.io/advisories/CVE-2026-121621/https://agentprime.io/advisories/CVE-2026-121621/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 21:00:53 GMTCVECVE-2026-95727: Authenticated Command Injection Vulnerability in HPE Networking VIAhttps://agentprime.io/advisories/CVE-2026-95727/https://agentprime.io/advisories/CVE-2026-95727/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 19:57:46 GMTCVECVE-2026-54161: upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD executionhttps://agentprime.io/advisories/CVE-2026-54161/https://agentprime.io/advisories/CVE-2026-54161/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 19:57:14 GMTCVECVE-2026-97350: Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windowshttps://agentprime.io/advisories/CVE-2026-97350/https://agentprime.io/advisories/CVE-2026-97350/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:21:44 GMTCVECVE-2026-121548: nnn through 5.3 OS Command Injection via togglex Pluginhttps://agentprime.io/advisories/CVE-2026-121548/https://agentprime.io/advisories/CVE-2026-121548/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:08 GMTCVECVE-2026-121429: AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()https://agentprime.io/advisories/CVE-2026-121429/https://agentprime.io/advisories/CVE-2026-121429/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:23 GMTCVECVE-2026-119742: Nagios XI < 2026R2 OS Command Injection via mibs.phphttps://agentprime.io/advisories/CVE-2026-119742/https://agentprime.io/advisories/CVE-2026-119742/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 13:43:57 GMTCVECVE-2026-77691: Command injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-77691/https://agentprime.io/advisories/CVE-2026-77691/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:50:31 GMTCVECVE-2026-105982: Command Injection in IPsec VPNhttps://agentprime.io/advisories/CVE-2026-105982/https://agentprime.io/advisories/CVE-2026-105982/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 09:00:05 GMTCVECVE-2026-105981: Command Injection in Digital I/Ohttps://agentprime.io/advisories/CVE-2026-105981/https://agentprime.io/advisories/CVE-2026-105981/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:59:52 GMTCVECVE-2026-105980: Command Injection in WireGuard VPNhttps://agentprime.io/advisories/CVE-2026-105980/https://agentprime.io/advisories/CVE-2026-105980/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:59:03 GMTCVECVE-2026-105979: Command Injection in ZeroTier VPNhttps://agentprime.io/advisories/CVE-2026-105979/https://agentprime.io/advisories/CVE-2026-105979/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:58:40 GMTCVECVE-2026-105978: Command Injection in Management Control Functionshttps://agentprime.io/advisories/CVE-2026-105978/https://agentprime.io/advisories/CVE-2026-105978/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:58:17 GMTCVECVE-2026-38595: An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.https://agentprime.io/advisories/CVE-2026-38595/https://agentprime.io/advisories/CVE-2026-38595/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 00:00:00 GMTCVEcriticalCVE-2026-120091: Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service hosthttps://agentprime.io/advisories/CVE-2026-120091/https://agentprime.io/advisories/CVE-2026-120091/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 21:19:19 GMTCVECVE-2026-116958: Konflux-ci: unquoted variable expansion in shell command executionhttps://agentprime.io/advisories/CVE-2026-116958/https://agentprime.io/advisories/CVE-2026-116958/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 20:59:48 GMTCVECVE-2026-119737: Amlogic pppoe_wrapper Command Injection via AF_UNIX Sockethttps://agentprime.io/advisories/CVE-2026-119737/https://agentprime.io/advisories/CVE-2026-119737/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 19:42:49 GMTCVECVE-2026-104080: Control Web Panel (CWP) < 1.29 OS Command Injection via valid_tokenhttps://agentprime.io/advisories/CVE-2026-104080/https://agentprime.io/advisories/CVE-2026-104080/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:22:17 GMTCVECVE-2026-77880: Control Web Panel (CWP) < 1.16 OS Command Injection via /newpass/https://agentprime.io/advisories/CVE-2026-77880/https://agentprime.io/advisories/CVE-2026-77880/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:21:08 GMTCVECVE-2026-77878: Control Web Panel (CWP) < 1.29 OS Command Injection via restoredatabase APIhttps://agentprime.io/advisories/CVE-2026-77878/https://agentprime.io/advisories/CVE-2026-77878/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:19:59 GMTCVECVE-2026-77876: Control Web Panel (CWP) < 1.16 OS Command Injection via protected_directoryhttps://agentprime.io/advisories/CVE-2026-77876/https://agentprime.io/advisories/CVE-2026-77876/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:18:18 GMTCVECVE-2026-73697: Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editorhttps://agentprime.io/advisories/CVE-2026-73697/https://agentprime.io/advisories/CVE-2026-73697/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:53:27 GMTCVECVE-2026-111560: OS Command Injection in Barracuda Applianceshttps://agentprime.io/advisories/CVE-2026-111560/https://agentprime.io/advisories/CVE-2026-111560/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 12:59:03 GMTCVECVE-2026-94349: OS command injection in Dell OpenManage Enterprisehttps://agentprime.io/advisories/CVE-2026-94349/https://agentprime.io/advisories/CVE-2026-94349/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 12:30:49 GMTCVE