CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- linuxfabrik lib, monitoring-plugins +1 morelinuxfabrik-lib: Local privilege escalation using embedded command7.8 High
- coollabsio coolifyCoolify LocalFileVolume fs_path command injection enables RCE8.8 High
- coderCoder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`8.3 High
- coollabsio coolifyCoolify authenticated remote command injection leading to RCE and secret exfiltration9.9 Critical
- python pillowPillow: WindowsViewer.get_command() OS command injection via unescaped shell path4.5 Medium
- flytohub flyto-coreFlyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`8.4 High
- react create-react-appreact create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection6.9 Medium
- myvesta vestamyVesta is affected by an authenticated remote code execution vulnerability. Low privileged users...8.5 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...6.7 Medium
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...7.2 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...7.2 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...7.2 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...6.5 Medium
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0...6.7 Medium
- decolua 9router9Router < 0.4.44 - OS Command Injection via sudoPassword Parameter in Tailscale Install Endpoint9.2 Critical
- electermelecterm: Command Injection in File System Operations (rmrf, mv, cp)8.8 High
@grackle-ai/powerlinenpm,@grackle-ai/runtime-sdknpm +1 moreGrackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)8.7 High- coderCoder vulnerable to workspace auto-creation via crafted URL parameters without user consent8.1 High
- notifiarr dockwatchDockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php9.2 Critical
- opensuse buildserviceobs-service-tar_scm: command injection via mercurial handler10.0 Critical
- openwrt luci-app-travelmate, travelmate +1 moreluci-app-travelmate - Arbitrary Command Execution via UCI Script Parameter7.7 High
- shenzhen aitemi e commerce co. ltd. m300 wi-fi repeaterShenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp9.3 Critical
- aws cdkOS Command Injection in aws-cdk-lib Docker Bundling7.0 High
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in translate_text.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php9.3 Critical
- guardian language-systemGuardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php9.3 Critical
- jaiotlink c492a-w6 wi-fi ip cameraJAIOTlink C492A-W6 4.8.30.57701411 OS Command Injection via SetMAC Endpoint8.7 High
- seiko solutions inc. skybridge mb-a100/mb-a110Improper neutralization of special elements used in an OS command ('OS Command Injection') issue...8.6 High
- stonefly storage concentrator, storage concentrator virtual machine +1 moreOS Command Injection in StoneFly Storage Concentrator10.0 Critical
- stonefly storage concentrator, storage concentrator virtual machine +1 moreOS Command Injection in StoneFly Storage Concentrator10.0 Critical
- coollabsio coolifyCoolify: Authenticated RCE via command injection in CA certificate management feature8.8 High
- coollabsio coolifyCoolify: Command Injection via Single-Quote Breakout in `executeInDocker()`6.6 Medium
- gotcha gotcha games inc. rpg maker mv, rpg maker mz +1 moreRPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection...8.4 High
- avtech security corporation dgm3103sctDGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability...8.6 High
- coollabsio coolifyCoolify: Authenticated Remote Code Execution via Command Injection in Destination Network Management8.8 High
- coollabsio coolifyCoolify: Authenticated Host RCE8.8 High
- openwrt luci-proto-openvpnluci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey8.7 High
- openwrt luci-app-tailscale-communityluci-app-tailscale-community - Command Injection via tailscale.do_login RPC7.7 High
- edimax ew-7478apcEdimax EW-7478APC POST Request formStaDrvSetup os command injection5.3 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code Execution7.7 High
- edimax ew-7478apcEdimax EW-7478APC POST Request formiNICbasic os command injection5.3 Medium
- Show moreLoading…