CWE-78: Shell injection
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command before it is sent to a downstream component.
Also known as Improper Neutralization of Special Elements used in an OS Command, Shell metacharacters, OS Command Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- juniper networks session smart conductorSession Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.9.8 Critical
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules8.8 High
- fogprojectFOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution8.8 High
- topluyo appTopluyo Desktop for Linux has an OS Command Injection issue9.6 Critical
- hcl software bigfix aexHCL BigFix AEX is affected by multiple security vulnerabilities.9.1 Critical
- eclipse foundation che, the eclipse foundation eclipse che +1 moreUnauthenticated Command Injection via kubeconfig Username in che-machine-exec9.8 Critical
- eisge kalifastKaliFast Project Management Platform ei_git_repo_url OS Command Injection8.7 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...7.2 High
- dell powerprotect data domain management centerDell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8,...7.2 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...7.2 High
- dell powerprotect data domain virtual editionDell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8,...7.2 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...8.8 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release...7.2 High
- linksys wag200gLinksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi8.6 High
- sunhillo surelineSunhillo SureLine OS Command Injection via networkDiag.cgi8.7 High
- tp-link systems inc. re305 v3Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE3056.9 Medium
- tp-link systems inc. re305 v3Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE3058.7 High
- runatlantis atlantisAtlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan8.8 High
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.9 Critical
- desmondmorris node-tesseractdesmondmorris node-tesseract Command Builder tesseract.js process os command injection6.9 Medium
- masc-ucsc hagenthagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools8.5 High
- alishahid74 kali-gptKali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters8.5 High
- bitscorp-mcp mcp-ffmpegmcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir7.3 High
- horw esp-mcpesp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters8.5 High
- codefriar sf-mcpsf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values8.5 High
- atxp gemini-cli-extensionATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools8.5 High
- hyperb1iss droidmindDroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass8.5 High
- ai-sdlc-framework ai-sdlcai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status8.5 High
- hitachi energy coretec 4, coretec 5 +1 moreAn OS command vulnerability exists in CoreTec product that allows authenticated users with...7.7 High
- eclipse foundation iofogiofogctl command injection via Controller provisioning response5.5 Medium
- hitachi hirdb server version 10, hirdb server version 9, hirdb server version 9(32) +2 more +4 moreOS Command Injection Vulnerability in HiRDB9.8 Critical
- smci mbd-x12spiSupermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability6.6 Medium
- smci mbd-x12stw-fSupermicro BMC's syslog feature contains a command injection vulnerability7.2 High
- moxa oncell g3150a-lte seriesSMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series7.5 High
- apache software foundation airflow ssh providerApache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host8.8 High
- sebhildebrandt systeminformationsysteminformation: Windows command injection in services() through Unicode quotation marks7.8 High
- github-kanban-mcp-serverSunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection5.3 Medium
- vertiv avocent acs8000Avocent ACS8000 wsserver command injection9.8 Critical
- wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap bridge, cynap videobar, firmware version +1 more +3 moreUnauthenticated RCE Vulnerability in WolfProt interface implementation9.3 Critical
- dolibarrDolibarr ERP CRM before 24.0.0 OS Command Injection via mysqldump Parameter8.6 High
- z.ai zcodeZ.ai Zcode Sed Command Filter os command injection5.3 Medium
- continuedev continuecontinuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection5.3 Medium
- quantgeekdev docker-mcpQuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection5.3 Medium
- No product listedXovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains...8.8 High
- dbcli myclidbcli mycli Whitelist source.py source_special_command_is_safe os command injection4.8 Medium
- unitree robotics go2, unitreerobotics unitree go2 +1 moreUnitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection9.4 Critical
- pypa virtualenvvirtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)7.1 High
- cactiCacti: Authenticated RCE on Data Input7.2 High
- dji crystalsky zs600cDJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root8.6 High
- dji crystalsky zs600cDJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root8.6 High
- Show moreLoading…