CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- diem-project diemdiem-project diem Administrative Console actions.class.php executeCommand os command injection5.1 Medium
- klaussilveira gitlistklaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection6.9 Medium
- No product listedAn OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary...9.8 Critical
- qubes os osQubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm...7.9 High
- powsybl powsybl-corePowSyBl: Command Injection in LocalCommandExecutor-s7.1 High
- shriyanss js-reconJS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values9.3 Critical
- snyk sweater-combSynk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name8.5 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post8.6 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via httpuploadcert.cgi8.6 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_post8.6 High
- green-computing numailGreen-Computing｜NUMail - OS Command Injection9.3 Critical
- openndsIn openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the...7.6 High
- openndsopenNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command...8.3 High
- No product listedAn OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of...9.8 Critical
- xiiaozet lk100wXiiaozet LK100W OS Command Injection8.7 High
- zoneminderZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)9.0 Critical
- zoneminderOS Command Injection in PayRange API8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Shell Injection via info command9.3 Critical
- maquina-app rails-mcp-serverrails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape8.6 High
- limanmys coreLiman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)9.1 Critical
- alexgladkov claude-in-mobileAlexGladkov claude-in-mobile client.ts execSync os command injection4.8 Medium
- unknown ctn720-w1, lf-1541, mt7620n +13 more +15 moreZbtlink MQWrt infosrvd Command Injection9.3 Critical
- No product listedAn issue was discovered in luci-app-https-dns-proxy on OpenWrt PR #15 (< 2026-01-17). The...8.8 High
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...8.8 High
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...8.8 High
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of...7.2 High
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of...9.1 Critical
- nagios host, teamviewer full client +1 moreCommand Injection in TeamViewer Desktop Client for Linux through Chat Link Handling8.8 High
- librenmsLibreNMS Virtualisation Discovery Module RCE8.6 High
- No product listedComfast CF-N1-S firmware 2.6.0.1 and CF-WR630AX (2024-01-30 build), the update_interface_png SET...6.8 Medium
- No product listedAn issue in Comfast CF-WR630AX v.2.7.0.2 allows a remote attacker to execute arbitrary code via...6.8 Medium
- macwarrior clipbucket-v5ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter9.2 Critical
- zackees transcribe-anythingzackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection6.3 Medium
- nvidia openshellNVIDIA OpenShell for Linux contains a vulnerability in its sandbox exec handler, where an...6.8 Medium
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where...7.8 High
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an...7.8 High
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an...7.8 High
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an...7.8 High
- nvidia openshellNVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause...8.8 High
- okta privileged access clientImproper Validation of SSH Target in Okta Privileged Access Client5.3 Medium
- chainlitChainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution9.8 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0 Critical
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreEmacs: emacs: command injection via crafted filenames in tramp7.8 High
- sonirico mcp-shellmcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist8.6 High
- sonirico mcp-shellmcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable8.4 High
- sonirico mcp-shellmcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias8.4 High
- fishcodetech mutekiFishCodeTech Muteki Default Local Worker Backend settings.json os command injection5.3 Medium
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreUnauthenticated Remote Code Execution via Shell Injection in Web Management Interface9.3 Critical
- sworddut mcp-ffmpeg-helpersworddut mcp-ffmpeg-helper Tool handlers.ts handleToolCall os command injection4.8 Medium
- Show moreLoading…