CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- gouef githubtoplanguagesgithubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow7.1 High
- cyclonedx cyclonedx-node-npm@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized `--workspace` Argument8.5 High
- flipped-aurora gin-vue-admingin-vue-admin vulnerable to RCE7.4 High
- pontedilana php-weasyprintPhpWeasyPrint: shell command injection via configurable WeasyPrint binary path due to inverted is_executable() guard (mirror of KnpLabs/snappy GHSA-vpr4-p6fq-85jc)8.2 High
- ruvnet agentic-flowAgentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync8.8 High
- naranor agent-coderagCodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution8.6 High
- sima gmbh bondix serverAuthenticated OS Command Injection in Bondix8.6 High
- jovancoding network-aiNetwork-AI has an an OS Command Injection issue9.9 Critical
- mervinpraison praisonaiPraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml7.8 High
- mervinpraison praisonaiPraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI SandboxExecutor allowedCommands bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI UI MCP connect endpoint allows unauthenticated local command execution9.8 Critical
- mervinpraison praisonaiPraisonAI: Compute-bridged file tools allow shell command injection8.8 High
- mervinpraison praisonaiPraisonAI recipe.run_stream skips dangerous-tool policy enforcement7.8 High
- frappe lmsOS Command Injection in LMS8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +11 more +13 moreDracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module7.5 High
- e107inc e107e107: Command Injection via shell expansion in ImageMagick resize destination path7.1 High
- splunk ai toolkitOS Command Injection in the btool Configuration Helper in Splunk AI Toolkit9.1 Critical
- openstack horizonOpenStack Horizon RC file generation does not escape special characters in project names6.0 Medium
- tinyhumansai openhumanOpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution9.4 Critical
- micro-star international co., ltd. radix ax6600 wifi 6 tri-band gaming routerRadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which...8.6 High
yt-dlpPyPIyt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp7.5 High- tp-link system inc. tl-wr940n v6, tp-link tl-wr940n firmware +1 moreOS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N8.5 High
- tp-link system inc. tl-wr940n v6, tp-link tl-wr940n firmware +1 moreOS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N8.5 High
- denoDeno: Command Injection via spawnSync & spawn on Windows8.1 High
- radiflow isap smart collectorOS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector9.1 Critical
- openclawOpenClaw < 2026.4.2 - Shell Positional Parameters Bypass in Inline-Eval Checks7.6 High
- openclawOpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers2.3 Low
- red hat ansible automation platform 2Galaxy_ng: shell injection in legacy role import via unsanitized git ref names7.5 High
- turck tben-l4-se-m2, tben-l5-se-m2, tben-ll-se-m2 +2 moreCommand Injection via name parameter8.7 High
- devolutions remote desktop managerImproper input validation in the SSH Elevate Shell feature in Devolutions Remote Desktop Manager...8.8 High
- browserstack browserstack-cypress-cliBrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json7.8 High
- fortra core privileged access manager (boks), core privileged access manager server +1 moreCore Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability7.5 High
- fortra core privileged access manager (boks), core privileged access manager server +1 moreCore Privileged Access Manager (BoKS) autoregistration service command injection vulnerability9.8 Critical
- No product listedAn OS command injection vulnerability in the /manage/features/media component of kanishka-linux...8.1 High
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- No product listedTenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function...9.8 Critical
- shlomif config::inifilesConfig::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle8.6 High
- openclawOpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist7.6 High
- openclawOpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn6.9 Medium
- iei integration corp ivec tank-xm811IEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - OS Command Injection8.6 High
- microsoft gdGD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle9.8 Critical
- macwarrior clipbucket-v5ClipBucket: Remote Play URL Command Injection9.8 Critical
- paloaltonetworks idira privileged session manager for ssh, cyberark software, a palo alto networks company pam self-hosted, privilege cloud +1 moreIdira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command8.7 High
- openclawOpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata7.7 High
- lingdojo kana-dojoKanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml8.5 High
- Show moreLoading…