CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- seppmail secure email gateway, seppmail +1 morePDF Password CMDi9.5 Critical
- international datacasting corporation (idc) sfx series superflex satellitereceiver web management interface, datacast sfx2100 firmware +1 moreAuthenticated OS Command Injection via Traceroute Utility leads to Root RCE9.3 Critical
- datacast sfx2100 firmware, international datacasting corporation (idc) sfx series superflex satellitereceiver web management interface +1 moreAuthenticated OS Command Injection via Ping Utility Leading to RCE as Root9.3 Critical
- mobvoi tichome mini firmwareA shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027...9.8 Critical
- openclawOpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension5.8 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Wrapper Binary Unwrapping in system.run7.1 High
openclawnpmOpenClaw's tools.exec.safeBins generic fallback allowed interpreter-style inline payload execution in allowlist mode2.3 Low- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via sort --compress-program Parameter5.8 Medium
- openclawOpenClaw < 2026.2.22 - Remote Code Execution via Shell Startup Environment Variable Injection in system.run7.7 High
openclawnpmOpenClaw affected by BASH_ENV / ENV startup-file injection into spawned shell commands7.3 High- openclawOpenClaw < 2026.2.19 - Command Injection via Unescaped Environment Variables in Windows Scheduled Task Script Generation6.9 Medium
- openclawOpenClaw < 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTP6.1 Medium
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run7.5 High
openclawnpmOpenClaw shell-env fallback trusted startup env and could execute attacker-influenced login-shell paths5.3 MediumopenclawnpmOpenClaw plugin runtime command execution is part of trusted plugin boundary6.9 Medium- openclawOpenClaw < 2026.2.19 - Local Command Injection via Unsafe cmd Argument Handling in Windows Scheduled Task Script Generation6.9 Medium
openclawnpmOpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)5.3 Medium- d-link dir-868l, dlink dir-868l firmware +1 moreD-Link DIR-868L SSDP Service sub_1BF84 os command injection9.3 Critical
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment6.3 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment6.3 Medium
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment6.3 Medium
- wwbn avideo-encoderAVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php9.8 Critical
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via Shell Line-Continuation Command Substitution in system.run6.0 Medium
- openclawOpenClaw < 2026.2.22 - Arbitrary Shell Execution via Unvalidated SHELL Environment Variable7.3 High
- openclawOpenClaw < 2026.2.22 - Allowlist Bypass via sort Configuration in safeBins7.1 High
- openclawOpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution5.8 Medium
- froxlorFroxlor Admin-to-Root Privilege Escalation via Input Validation Bypass + OS Command Injection9.1 Critical
- openclawOpenClaw < 2026.2.22 - Remote Code Execution via SHELLOPTS/PS4 Environment Injection in system.run7.5 High
- cohesity tranzmanMultiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone...7.2 High
- cohesity tranzmanCohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to contain an...7.2 High
- weintek easyweb, cmt-3072xh2 firmware +1 moreWeintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password...7.5 High
- weintek easyweb, cmt-3072xh2 firmware +1 moreA command injection vulnerability in the DHCP activation feature of Weintek cMT-3072XH2 easyweb...9.8 Critical
openclawnpmOpenClaw: Gateway /tools/invoke tool escalation + ACP permission auto-approval8.8 High- openclawOpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper Persistence7.1 High
- openclawOpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback5.8 Medium
- idno, withknown known +1 moreIdno: Remote Code Execution via Chained Import File Write and Template Path Traversal8.6 High
- tp-link systems inc. deco be25 v1.0, tp-link deco be25 firmware +1 moreCommand injection on TP-Link Deco BE258.5 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/admin/sub_language_ajax.inc.php via POST new_language parameter7.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/editinstance.php via POST main_database parameter7.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /plugin/vchamilo/views/manage.controller.php7.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS Command Injection in /main/cron/lang/check_parse_lang.php7.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: OS command Injection in /plugin/vchamilo/views/import.php with the POST to_main_database parameter7.1 High
- cgm clininetRCE on uhcapache user permissions9.4 Critical
- tenda ac15 firmwareAn issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18_multi. When the...9.8 Critical
- opendcimopenDCIM <= 23.04 OS Command Injection via dot Configuration Parameter9.3 Critical
- vimVim has OS Command Injection in netrw4.4 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection10.0 Critical
- johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 moreJohnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution8.8 High
- logicminds rubyipmi, redhat satellite, red hat satellite 6 +4 more +6 moreRubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username8.3 High
- totolink n300rh, n300rh firmware +1 moreTotolink N300RH Web Management cstecgi.cgi setWebWlanIdx os command injection9.3 Critical
- Show moreLoading…