CWE-88: Argument Injection
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
Also known as Improper Neutralization of Argument Delimiters in a Command.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- linuxfoundation tekton pipelines, tektoncd pipeline, red hat openshift lightspeed +8 more +10 moreTekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE7.5 High
- phpunit project phpunitPHPUnit: Argument injection via newline in PHP INI values forwarded to child processes7.8 High
- amazon aws efs csi driver, efs csi driver +1 moreAWS EFS CSI Driver Mount Option Injection6.9 Medium
- dell powerprotect data domain, data domain operating system, powerprotect dp series appliance +2 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0...6.7 Medium
- lenovo software fixDuring an internal security assessment, a potential vulnerability was discovered in Lenovo...8.5 High
- flux159 mcp-server-kubernetesMCP Server Kubernetes has Argument Injection in its port_forward tool via space-splitting8.3 High
- jellyfinJellyfin: Potential SSRF + Arbitrary file read via stream argument injection9.3 Critical
- upkeeper solutions instant privilege accessImproper neutralization of argument delimiters in a command ('argument injection') vulnerability...9.0 Critical
@aiondadotcom/mcp-sshnpmSSH/SCP option injection allowing local RCE in @aiondadotcom/mcp-ssh8.7 High- python software foundation cpython, red hat ai inference server 3.2, ai inference server 3.3 +21 more +23 moreIncomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()7.0 High
- mervinpraison praisonaiPraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars8.4 High
skilletonnpmskilleton has improper input handling in repository/path processing6.9 Medium- filebrowserFile Browser has a Command Injection via Hook Runner7.5 High
- bulwarkmail webmailRoundcube Webmail: Unsanitized IMAP SEARCH command arguments3.1 Low
- electron, red hat build of podman desktop, build of podman desktop - tech preview +2 moreElectron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference7.8 High
- tecno mobile pova7 pro 5gCode Execution in AssistFeedbackService on TECNO Pova7 Pro 5G7.8 High
- cloudark kubeplusIn KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF...7.6 High
- spring ai, vmware spring ai +1 moreSpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution9.8 Critical
- zabbixAgent 2 Docker plugin arbitrary file read via Docker API injection6.1 Medium
- salesforce marketing cloud engagementImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability...9.4 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnames5.4 Medium
- python, python software foundation cpython, red hat ai inference server 3.2 +24 more +26 morewebbrowser.open() allows leading dashes in URLs7.0 High
- locutus, red hat logging subsystem for red hat openshift +1 moreLocutus: RCE via unsanitized input in create_function()9.8 Critical
- lenovo baiying, vantage +1 moreAn input validation vulnerability was reported in the LenovoProductivitySystemAddin used in...6.8 Medium
- lenovo baiying, vantage +1 moreAn input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo...6.9 Medium
- lenovo baiying, vantage +1 moreAn input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo...6.9 Medium
- fortinet fortideceptorAn improper neutralization of argument delimiters in a command ('argument injection')...6.0 Medium
- mbs ubr-01 mk ii, ubr-02, ubr-lon +1 more +3 morePrivilege escalation possible7.8 High
- welovemedia ffmatewelovemedia FFmate ffmpeg.go Execute argument injection5.3 Medium
- gogsGogs: Release tag option injection in release deletion8.8 High
- cisco adaptive security appliance software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 moreA vulnerability in the Cisco FXOS Software CLI feature for Cisco Secure Firewall ASA Software and...6.0 Medium
- cisco secure firewall threat defense (ftd) softwareCisco Secure FTD Software Authenticated Command Injection Vulnerability6.0 Medium
- xddxdd bird-lg-goAn Argument Injection vulnerability exists in bird-lg-go before commit 6187a4e. The traceroute...7.5 High
- openclawOpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting5.4 Medium
- openclawOpenClaw < 2026.2.21 - Command Injection via cmd.exe /c Trailing Arguments in system.run7.1 High
- intermesh group-office, groupoffice +1 moreGroup-Office Vulnerable to Remote Code Execution (RCE)9.4 Critical
- maximmasiutin tinywebCGI Parameter Injection (Bypass of STRICT_CGI_PARAMS and EscapeShellParam)10.0 Critical
- bleon-ethical api-gateway-deployapi-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution9.2 Critical
- totolink x5000r firmwareTOTOLINK X5000R v9.1.0cu_2415_B20250515 contains an argument injection vulnerability in the...9.8 Critical
- openclawOpenClaw < 2026.2.2 - Exec Allowlist Bypass via Command Substitution in Double Quotes9.2 Critical
- weblateWeblate has an argument injection in management console6.6 Medium
- tanium server, module server +1 moreTanium addressed a local privilege escalation vulnerability in Tanium Server.6.7 Medium
- tanium module server, server +1 moreTanium addressed a local privilege escalation vulnerability in Tanium Module Server.6.7 Medium
- group-office group office, intermesh groupoffice +1 moreGroup-Office Argument Injection in MaintenanceController::actionZipLanguage9.4 Critical
- sensiolabs symfonySymfony has incorrect argument escaping under MSYS2/Git Bash on Windows that can lead to destructive file operations6.3 Medium
- salesforce marketing cloud engagementImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability...9.8 Critical
- salesforce marketing cloud engagementImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability...9.8 Critical
- watchyourlanWatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability8.8 High
- gnu inetutils, debian linux +1 moretelnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value...9.8 Critical
- go toolchain cmd/go, golang go, red hat enterprise linux 10 +30 more +32 moreArbitrary file write using cgo pkg-config directive in cmd/go7.8 High
- Show moreLoading…