CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setScheduleCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setUpgradeFW os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setLanguageCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setTracerouteCfg os command injection9.3 Critical
- totolink a8000ruTotolink A8000RU Web Management cstecgi.cgi setDiagnosisCfg os command injection9.3 Critical
- nousresearch hermes-agentNousResearch hermes-agent terminal_tool approval.py detect_dangerous_command os command injection6.9 Medium
- edimax ew-7438rpnEdimax EW-7438RPn webs formWizSurvey os command injection5.3 Medium
- edimax ew-7438rpnEdimax EW-7438RPn webs formWpsStart os command injection5.3 Medium
- nezhahq nezhaNezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron9.9 Critical
- shell-quote, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 moreshell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`9.2 Critical
- knplabs snappySnappy: Binary path is never shell-escaped due to an inverted is_executable check7.5 High
- fissionFission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables6.9 Medium
- freebsdRemote code execution via installer Wi-Fi access point scans7.5 High
- netatalkShell injection via volume path6.7 Medium
- netatalksystem() after failed chdir()2.5 Low
- netatalkBitwise OR logic bug enables shell injection7.5 High
- hp linux imaging and printing, hp inc linux imaging and printing software, hp, inc. hp linux imaging and printing software +15 more +17 moreHP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution8.5 High
- cisco thousandeyes enterprise agentCisco ThousandEyes BrowserBot Command Injection Vulnerability6.3 Medium
- shivammathur setup-php, setup php +1 moresetup-php: Command Injection in Repository-Derived PHP Version Resolution5.6 Medium
- convoypanel panelCtrlPanel: Unauthenticated RCE using installer script10.0 Critical
- decolua 9router9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes10.0 Critical
- kopiaKopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used9.8 Critical
- scadabrImproper neutralization of special elements used in an OS command ('OS command injection') in ScadaBR8.7 High
- No product listedAn OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin...9.8 Critical
- No product listedA command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP...8.8 High
- No product listedA command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web...5.4 Medium
- dokployDokploy has Command Injection in its Service Operations9.9 Critical
- getarcaneapp arcaneArcane: OS Command Injection in Volume Browser ListDirectory via path query parameter6.3 Medium
- vercel aivercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection2.3 Low
- wwbn avideoWWBN AVideo Live: OS command injection in on_publish.php execAsync via unescaped m3u8 URL8.8 High
- eugeny tabbyTabby auto-confirms ZMODEM detection on terminal output, leading to shell command execution from displayed file content under fish, bash, and zsh7.0 High
- eugeny tabbyTabby: RCE via `tabby://run` URL Scheme9.4 Critical
- vimVim: Command injection in tar#Vimuntar via missing shellescape {special} flag3.6 Low
- dhtmlx pdf export moduleRemote Code Execution in PDF Export Module10.0 Critical
- delphix continuous data cassandra connector, cockroachdb connector, couchbase connector +9 more +11 moreImproper input validation in Delphix Continuous Data connectors allows an authenticated user to...8.7 High
- zelon88 hrconvert2HRConvert2: Missing Sanitization enables Unauthenticated Remote Command Execution9.3 Critical
- universal-tool-calling-protocol python-utcppython-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol8.3 High
- midoks mdserver-webmdserver-web: Missing Authorization and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')9.3 Critical
- apostrophecms @apostrophecms/cli@apostrophecms/cli: Command Injection in apos create via Unsanitized Password Input6.5 Medium
- flowise, flowise components +1 moreFlowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess8.7 High
- fleetdm fleetFleet vulnerable to OS command injection in software packages6.0 Medium
- evank web::passwdWeb::Passwd versions through 0.03 for Perl is vulnerable to RCE9.8 Critical
- opnsense core, opnsense +1 moreOPNsense: RCE on user managment9.1 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Admin Command Injection Vulnerability6.1 Medium
- cliuniget: Command Injection in tool.Check Leading to Arbitrary Code Execution7.8 High
- cnighswonger claude-code-cache-fixclaude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh8.6 High
- sebhildebrandt systeminformation, red hat cryostat 4, multicluster engine for kubernetes +4 more +6 moresysteminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name7.8 High
- lenovo home storage hub t20, home storage hub x20, personal cloud a1 +7 more +9 moreA potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could...8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreKnowledge Appliance mode iControl REST vulnerability8.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP iControl SOAP vulnerability8.5 High
- Show moreLoading…