CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities8.5 High
- haiwell iot cloud hmi gatewayHaiwell IoT Cloud HMI Gateway OS Command Injection10.0 Critical
- tenable security centerCommand Injection9.4 Critical
- tenable security centerCommand Injection9.4 Critical
- tenable security centerImproper Input Validation8.7 High
- tenable security centerLocal Privilege Escalation8.5 High
- tenable security centerRemote Code Execution8.6 High
- baicells eg3661mBaicells EG3661M LuCI Web luci os command injection8.6 High
- openchoreoOpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods8.8 High
- freepbx music, sangoma freepbx +1 moreAuthenticated FreePBX Music RCE via mpg123 and Asterisk Call Files7.6 High
- freepbx ttsFreePBX: Authenticated TTS AGI Command Injection Through TTS Name7.5 High
- zimbra collaboration, synacor zimbra collaboration suite (zcs), zimbra collaboration suite +2 moreA remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when...8.9 High
- rsyncproject rsyncrsync < 3.5.0 Command Injection via Multiple Code Paths9.2 Critical
- flowiseai flowiseFlowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore9.0 Critical
- flowiseai flowiseFlowise before 3.1.3 Sandbox Escape via Puppeteer9.4 Critical
- seriousm4x upsnapUpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmd9.8 Critical
- mithaldu pdf::webkitPDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for6.1 Medium
- seriousm4x upsnapUpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd9.6 Critical
- ibm informix dynamic serverIBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution7.3 High
- ibm i access client solutionsIBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities7.8 High
- ibm security verify access, verify identity access, verify identity access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access7.2 High
- ibm iIBM i is Affected By Remote Code Execution Vulnerabilities [, ]8.8 High
- ibm iIBM i is Affected By Remote Code Execution Vulnerabilities [, ]8.8 High
- canonical lxdLXD arbitrary lxc.conf directive injection via NVIDIA instance configuration8.7 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in the Debug Server7.1 High
- ibm db2 mirror for iIBM Db2 Mirror for i is vulnerable to OS command injection []9.8 Critical
- ibm iIBM i is Affected By Multiple Vulnerabilities in Domain Name System8.8 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in Domain Name System8.8 High
- ibm iIBM i is Affected By Multiple Vulnerabilities in SQL6.3 Medium
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i8.3 High
- ibm iIBM i is Affected By privilege escalation in Navigator for i8.8 High
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution7.7 High
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI Authenticated RCE via Custom-Variable Macro Injection7.7 High
- semaphoreui semaphoreSemaphore U: OS Command Injection9.9 Critical
- prowler-cloud prowlerProwler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path9.9 Critical
- cloudflare https://github.com/cloudflare/pages-actioncloudflare/pages-action is deprecated — migration required by September 18th, 20268.8 High
- libgit2libgit2 Shell Command Injection via ssh_libssh2 Backend8.6 High
- filerunFileRun 2026.2.0 RCE via Thumbnail Generation Command Injection8.7 High
- electermElecterm check folder size function may get attacked by unsafe folder name8.8 High
- davila7 claude-code-templatesClaude Code Templates: Unauthenticated OS command injection (RCE) in Claude Code Studio server (--studio)8.8 High
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)7.7 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0 Critical
- activepiecesActivepieces: Remote Code Execution via Command Injection in Code Step Name8.7 High
- google turbiniaGoogle Turbinia arbitrary command execution7.5 High
- vimVim: Arbitrary Code Execution via Shell Keyword Lookup8.4 High
- netgear mr60, mr60 firmware, mr70 +51 more +53 moreCommand injection vulnerability in some NETGEAR Nighthawk devices4.9 Medium
- wg-easywg-easy wg-easy - OS Command Injection9.9 Critical
- zoneminderZoneMinder ZoneMinder - Remote Code Execution8.8 High
- Show moreLoading…