CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- dolibarr erp\/crmDolibarr user with permission to edit PHP content can bypass filtering to restrict dangerous PHP functions8.8 High
- flowsintCommand Injection and Docker container escape allows root on host machine9.3 Critical
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability...6.7 Medium
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of...6.7 Medium
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0...7.2 High
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0...7.2 High
- dell data domain operating system, powerprotect data domain, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...7.2 High
- teamt5 threatsonar anti-ransomwareTeamT5｜ThreatSonar Anti-Ransomware - Privilege Escalation8.7 High
- asustor inc. adm, asustor data master +1 moreA command injection vulnerability was found in the PPTP VPN Clients on the ADM9.4 Critical
- rclone, red hat openshift api for data protection, advanced cluster management for kubernetes 2 +2 moreRClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution9.2 Critical
- std42 elfinderelFinder: Command injection in resize background color parameter when using ImageMagick CLI8.9 High
- mervinpraison praisonaiIncomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI9.8 Critical
- openclawOpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection8.7 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration9.4 Critical
- radare radare2radare2 Command Injection via DWARF Parameter Names8.5 High
- neutrinolabs xrdpxrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesman6.3 Medium
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0...6.7 Medium
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0...6.7 Medium
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0...6.7 Medium
- wavlink wl-wn530h4Wavlink WL-WN530H4 internet.cgi snprintf os command injection8.6 High
- cubecartAn OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user...8.6 High
- paperclipai @paperclipai/serverPaperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands8.7 High
- paperclip paperclipai, paperclipai @paperclipai/server +1 morePaperclip: Privilege Escalation via Agent-Controlled workspaceStrategy.provisionCommand Leading to OS Command Execution8.8 High
- sagredo qmailsagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in...8.1 High
- wwbn avideoWWBN AVideo vulnerable to RCE caused by clonesite plugin8.9 High
- flowiseai flowise, flowise-components +1 moreFlowise: Authenticated RCE Via MCP Adapters10.0 Critical
- radare radare2radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB...7.4 High
- hgiga isherlock-audit-4.5, isherlock-audit-5.5, isherlock-base-4.5 +1 more +3 moreHGiga｜iSherlock - OS Command Injection9.3 Critical
- renovatebot renovateRenovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance6.8 Medium
- radare radare2radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()8.4 High
- wwbn avideoAVideo has an incomplete fix for CVE-2026-33502 (Command Injection)9.3 Critical
- containers podman, red hat enterprise linux 10, enterprise linux 8 +3 more +5 morePowerShell Command Injection in Podman HyperV Machine4.0 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has OS Command Injection via export_all_certificates action8.8 High
- it-novum openitcockpitopenITCOCKPIT has Authenticated Command Injection Leading to Remote Code Execution via Host Address Macro Expansion8.8 High
- composer, red hat hardened images +1 moreComposer is vulnerable to Command Injection via Malicious Perforce Repository7.8 High
- composer, red hat hardened images +1 moreComposer has Command Injection via Malicious Perforce Reference8.8 High
- fortinet fortisandbox, fortisandbox paas +1 moreA improper neutralization of special elements used in an os command ('os command injection')...9.1 Critical
- 1panel-dev maxkbMaxKB: Sandbox escape via LD_PRELOAD bypass6.3 Medium
@aiondadotcom/mcp-sshnpmSSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh8.7 High- 1panel-dev maxkbMaxKB: RCE via MCP stdio command injection in workflow engine4.6 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setPasswordCfg os command injection9.3 Critical
- simple-git project simple-git, red hat build of keycloak, enterprise linux 8 +5 more +7 moresimple-git has Command Execution via Option-Parsing Bypass8.1 High
- artica pandora fms, pandora fms fms +1 moreOS Command Injection in Event Response Execution7.5 High
- artica pandora fms, pandora fms fms +1 moreOS Command Injection in WebServerModuleDebug via Blacklist Bypass leads to Remote Code Execution8.7 High
- artica pandora fms, pandora fms fms +1 moreOS Command Injection in Network Report leads to Remote Code Execution8.7 High
- totolink n300rhTotolink N300RH upgrade.so setUpgradeUboot os command injection6.9 Medium
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setIpQosRules os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWanCfg os command injection9.3 Critical
- totolink a7100ruTotolink A7100RU CGI cstecgi.cgi setWizardCfg os command injection9.3 Critical
- danielmiessler personal ai infrastructuredanielmiessler Personal_AI_Infrastructure parse_url.ts os command injection5.3 Medium
- Show moreLoading…