CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- aider-ai aiderAider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings8.5 High
- asus routerImproper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows...7.7 High
- asus routerImproper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and...8.6 High
- No product listedAn OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link...8.8 High
@rog0x/mcp-docker-toolsnpm@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function7.5 High@justice8096/sagemath-mcp-servernpm@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions7.5 High- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- kiloview e3 firmwareKiloview E3 NDI Encoder OS Command Injection9.4 Critical
- aws aws-sam-cliOS command injection in the Terraform hook in AWS SAM CLI8.4 High
- drupal ffmpeg image toolkitFfmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-2209.8 Critical
- uselagoon lagoonLagoon core ssh service vulnerable to remote code execution9.4 Critical
- oneplus oxygenosOnePlus OxygenOS improper neutralization of special elements vulnerability8.5 High
- qingteng host adaptive security platformOS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox8.5 High
- pypa virtualenvvirtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST7.8 High
- pypa virtualenvvirtualenv activation scripts run code from a path that contains a placeholder name7.8 High
- pypa virtualenvvirtualenv activate.fish runs commands from a path or prompt with a backslash before a quote7.8 High
- totolinkAn os command injection vulnerability exists in the boa formWsc peerRptPin functionality of...9.1 Critical
- totolinkAn os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of...9.1 Critical
- totolinkA OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of...9.1 Critical
- totolinkAn OS command injection vulnerability exists in the boa formWizard newPass functionality of...9.1 Critical
- totolinkAn OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R...9.1 Critical
- totolinkA OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):...9.1 Critical
- totolinkA OS command injection vulnerability exists in the boa formUpload() functionality of X2000R ...9.1 Critical
- pypa virtualenvvirtualenv bash activate runs commands from an environment name with a backslash before $7.8 High
- pypa virtualenvvirtualenv: Bash prompt values can change meaning under older compatibility modes7.1 High
- pypa virtualenvvirtualenv: Generated POSIX console launchers interpret destination paths as shell syntax7.8 High
- wavlink wl-wn530be1-aWavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler9.3 Critical
- No product listedaaPanel File Manager common.py ExecShell os command injection9.4 Critical
- apache software foundation couchdbApache CouchDB: Admin credentials leading to code execution as operating system user9.3 Critical
- vitejs launch-editor, vite, vite-plus +2 morelaunch-editor: escapeCmdArgs() omits % escaping on Windows6.3 Medium
- draytek vigor2960DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection9.4 Critical
- mcollina mcp-ripgrepmcollina mcp-ripgrep Advanced Search Tool index.ts os command injection4.8 Medium
- h3c magic nx15H3C Magic NX15 usrlist sub_416874 os command injection9.4 Critical
- python pillowPillow: Argument Injection in Ghostscript call, potentially leading into RCE9.2 Critical
- orbitale imagemagick-phporbitale imagemagick-php Command.php font os command injection6.9 Medium
- fusionpbxFusionPBX Dialplan Editor dialplan.php os command injection5.1 Medium
- jumpserverJumpServer Template Rendering os command injection5.1 Medium
- streamsoft pingtools network utilitiesPingTools Network Utilities 4.64 - OS command injection through Watcher ICMP host8.6 High
- camunda 7Camunda Expression Injection via orQueries RCE9.3 Critical
- bentomlBentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys8.5 High
- alexpasmantier televisionTelevision 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting8.5 High
- hewlett packard enterprise hpe compute scale-up server 3200 platform, hpe compute scale-up server 3250 platform, hpe superdome flex 280 server +2 more +4 moreHPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers, Remote Command Execution vulnerability7.2 High
- geovision gv-asmanagerGV-ASManager Web Server Command Injection Vulnerability9.8 Critical
- wso2 api manager, carbon user manager kernel, enterprise integrator +4 more +6 moreRemote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution9.1 Critical
- tektronix 3 series mdoAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection...8.8 High
- apache software foundation kylinApache Kylin: spark job OS command injection8.8 High
- anthropics claude-agent-sdk-pythonClaude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution9.2 Critical
- zoneminderZoneMinder: Authenticated RCE via command injection in monitor Device Path8.8 High
- zoneminderZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature8.8 High
- Show moreLoading…