CWE-88: Argument Injection
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
Also known as Improper Neutralization of Argument Delimiters in a Command.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- nfriedly bestzipbestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter8.6 High
- nltkNLTK before 3.10.3 JVM Argument Injection via Per-Call Options9.3 Critical
- fdawgs node-popplerFdawgs node-poppler Argument Injection index.js pdfUnite argument injection6.9 Medium
- gitpython-developers gitpythonGitPython before 3.1.59 Arbitrary File Read via TagReference.create7.1 High
- gitpython-developers gitpythonGitPython before 3.1.59 Arbitrary File Read via Repo.blame()7.1 High
- gitpython-developers gitpythonGitPython before 3.1.59 Remote Code Execution via Config Injection9.3 Critical
- hashcathashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection8.5 High
- lxc incusIncus has an argument injection in storage volume block.create_options that leads to arbitrary command execution9.9 Critical
- apache inlongApache InLong: Agent Installer — Command Injection to RCE via Default Credentials8.8 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability10.0 Critical
- phpmyfaqphpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL6.9 Medium
- hmbown codewhaleCodeWhale before 0.8.64 Argument Injection via git_show8.5 High
- hmbown codewhaleCodeWhale before 0.8.64 Argument Injection via git_blame8.3 High
- pyenvPyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual)2.0 Low
- cliuniget: EDITOR Command Injection in uniget CLI1.0 Low
- rsyncproject rsyncrsync < 3.5.0 Command Injection via Multiple Code Paths9.2 Critical
- rsyncproject rsyncrsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync8.6 High
- mithaldu pdf::webkitPDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document9.8 Critical
- apache alluraApache Allura: Git command injection9.8 Critical
- semaphoreui semaphoreSemaphore U: OS Command Injection9.9 Critical
- prefecthq prefectPrefectHQ Prefect - Argument Injection8.8 High
- gitpython-developers gitpythonGitPython before 3.1.58 Command Execution via split_single_char_options8.7 High
- gitpython-developers gitpythonGitPython before 3.1.58 Config Injection via option-name8.7 High
- gitpython-developers gitpythonGitPython before 3.1.58 Remote Code Execution via Repo.init7.7 High
- gitpython-developers gitpythonGitPython before 3.1.58 Arbitrary File Overwrite via read-tree7.2 High
- indravoyager xidownxidown - Argument Injection via Unterminated yt-dlp Command Line Construction4.4 Medium
- gitpython-developers gitpythonGitPython before 3.1.56 Arbitrary File Truncation via Commit.count5.3 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: OS command injection in MASTER_PASSWORD_HOOK via untrusted username substitution7.7 High
- redhatinsights yggdrasil-worker-package-manager, red hat enterprise linux 10 +1 moreYggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection7.8 High
- apple macosAn injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia...7.8 High
pheditor/pheditorPackagistPheditor: Terminal command-allowlist bypass via argument injection leads to RCE — surviving vector after the metacharacter-sanitization fixes8.8 High- gitpython-developers gitpythonGitPython before 3.1.54 Remote Code Execution via kwarg value smuggling8.7 High
- gitpython-developers gitpythonGitPython before 3.1.54 Arbitrary File Overwrite via diff7.2 High
- aws bedrock-agentcore 1.18.1Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()8.4 High
- red hat ansible automation platform 2Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrary code execution via malicious playbook filename7.8 High
- gitpython-developers gitpythonGitPython before 3.1.51 Command Injection via unguarded Git options8.6 High
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +4 more +6 moreAnsible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for cve-2026-11332)7.8 High
- moby buildkitGit source checkout from a bundle file could lead to command injection6.5 Medium
- freerdpFreeRDP RDP File Parser Remote Code Execution via CLI Options8.5 High
- wekanWekan: Shell Injection via Avatar Upload9.9 Critical
- metabaseMetabase: Arbitrary File Read via MySQL Connection Property Injection7.6 High
- flux159 mcp-server-kubernetesMCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools9.3 Critical
- bosh-ecosystem / bosh (bosh-cli) bosh-cli, cloudfoundry bosh cli +1 moreArgument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director7.7 High
- apache camelApache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer9.1 Critical
- tubitak bilgem software technologies research institute pardus-softwareArgument Injection in TUBITAK BILGEM's pardus-software8.8 High
- linuxfabrik monitoring-pluginsLinuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation7.0 High
@grackle-ai/powerlinenpm,@grackle-ai/runtime-sdknpm +1 moreGrackle has command/argument injection in the git worktree executor that enables RCE on provisioned hosts via an unsanitized task branch name (shell:true)8.7 High- repomixRepomix: Command Injection (RCE) via `--remote-branch` Argument Injection7.5 High
- red hat openshift dev spaces 3.29, redhat openshift dev spaces +1 moreVscode-java: vscode: command injection vulnerability in the javadoc hover provider of the vscode-java extension8.8 High
@cyclonedx/cdxgennpm@cyclonedx/cdxgen: Maven project scanning may allow shell command injection through repository-controlled module paths6.9 Medium- Show moreLoading…