CWE-88: Argument Injection
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
Also known as Improper Neutralization of Argument Delimiters in a Command.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- filebrowserFile Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)9.3 Critical
- pnpmpnpm: Git Fetch Argument Injection via Lockfile resolution.commit6.4 Medium
- cactiCacti: Command Injection via escape_command() no-op in RRDtool execution8.6 High
- jellyfinJellyfin: Potential FFmpeg argument injection via unescaped subtitle file path8.8 High
- fatpipe warpWarp: DCS lifecycle hook spoofing can alter terminal session metadata4.3 Medium
- open source tortoisegitImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit5.5 Medium
skillctlcrates.ioskillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgeryNo score- kidocode crawl4aiCrawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args10.0 Critical
- docker mcp-gatewayMCP Gateway: Argument injection via OCI image label YAML in Docker MCP Gateway8.7 High
- aws bedrock-agentcoreImproper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()8.4 High
- webpros wordpress-toolkitArgument injection vulnerability in WordPress Toolkit before 6.11.0 as used in cPanel & WHM,...9.9 Critical
- nomachinePotential local privileges escalation through argument injection in the nxchmod.sh script7.3 High
- nationalsecurityagency ghidraGhidra < 12.1- Command Injection via URL Annotation Click7.3 High
- flux159 mcp-server-kubernetesmcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration6.1 Medium
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +29 more +31 moreAnsible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution7.8 High
- libfuse sshfsSSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')7.0 High
- cloudfoundry foundation cf deployment, smb-volume-release +1 moreTenant-controlled comma smuggles arbitrary CIFS mount options8.1 High
- vitejs launch-editor, vite, red hat cluster observability operator 1.5.0 +25 more +27 morelaunch-editor vulnerable to command injection via the crafted request on Windows7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection...7.1 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill7.5 High
- sensiolabs symfony, symfony mailer +1 moreSymfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address8.7 High
- mcdope pam usbpam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent8.2 High
- katacontainers kata containers, kata-containers +1 moreKata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations5.8 Medium
- prolix-oc lumiverseLumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape9.1 Critical
- prolix-oc lumiverseLumiverse: RCE via MCP stdio argument injection9.9 Critical
- prefecthq prefecthq/prefectArgument Injection in prefecthq/prefect8.5 High
- iinaIINA < 1.4.3 Command Execution via iina://open URL Scheme8.6 High
- mate-desktop atril, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 morePDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen8.4 High
- linlinjava litemalllinlinjava litemall Database Setting DbUtil.java load argument injection5.1 Medium
- vimVim: Command injection in tar#Vimuntar via missing shellescape {special} flag3.6 Low
- dbt-labs dbt-mcp, getdbt dbt mcp server +1 moredbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters6.3 Medium
- n8nn8n: Arbitrary File Read via Git Node9.4 Critical
- opnsense, opnsense core +1 moreOPNsense: Command Injection via Attacker-Controlled DHCP Config9.1 Critical
- opnsense, opnsense core +1 moreOPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method9.1 Critical
- fortinet fortideceptorAn improper neutralization of argument delimiters in a command ('argument injection')...4.0 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +19 more +21 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM...6.1 Medium
- red hat openshift ai (rhoai)The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection...9.8 Critical
- hex-rays idaHex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via...6.5 Medium
- electermUnvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click9.6 Critical
- electermelecterm: RCE via malicious SSH server filename in openFileWithEditor7.8 High
- jupyter jupyterlab, red hat migration toolkit for applications 8.2, openshift ai (rhoai) +1 more +3 moreJupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.8.8 High
- photostructure exiftool-vendored.jsexiftool-vendored: Argument injection via newline characters in tag names8.2 High
- crestron electronics touchpanels (x60/x70)Hidden Console Command7.4 High
- archiveboxArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView9.3 Critical
- prefecthq prefectPrefectHQ prefect GitRepository Pull storage.py argument injection5.3 Medium
- gotenbergGotenberg vulnerable to argument injection via newlines in ExifTool metadata values10.0 Critical
- gitpython-developers gitpythonGitPython: Unsafe option check validates multi_options before shlex.split transforms it8.1 High
- simple-git project simple-git, red hat enterprise linux 8, enterprise linux 9 +3 more +5 moresimple-git is vulnerable to Remote Code Execution9.2 Critical
dieselcrates.ioDiesel: Command injection in Diesel's implementation of `COPY FROM`/`COPY TO`6.9 Mediumphpunit/phpunitPackagistPHPUnit: Argument injection via newline in PHP INI values forwarded to child processes7.8 High- Show moreLoading…