CVE-2026-85523 is a high-severity OS command injection vulnerability in Felisify Information Technologies Industry and Trade Inc.'s SambaBox product. It affects versions before 5.4.1. The flaw involves improper neutralization of special elements in OS commands, allowing an attacker with limited privileges to execute arbitrary commands. The vulnerability has a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-91140 is a critical OS command injection vulnerability in Progress Software Autonomous REST Connector GenAI Agents version 2.0. It arises from improper neutralization of special elements in shell-based temporary-file cleanup instructions. An attacker can exploit this by supplying a crafted Swagger/OpenAPI document, leading to arbitrary command execution on a developer's machine when the generator is invoked.
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exec {command}" with zero validation, no allowlisting, and no sandboxing. The command executes immediately when the server list is fetched. Additionally, the env field allows arbitrary environment variable injection (e.g., LD_PRELOAD, PATH override). This vulnerability is fixed in 1.9.0.
CVE-2026-105697 is a critical OS command injection vulnerability in langflow-ai's langflow prior to version 1.10.3. It allows an authenticated user or, under default insecure configurations, an unauthenticated user to execute arbitrary OS commands on the host running langflow by configuring malicious MCP servers. The vulnerability arises from insufficient validation of commands and arguments passed to the MCP stdio transport, which executes them via a shell wrapper before version 1.10.3. This flaw was fully fixed in langflow 1.10.3 by enforcing strict command allowlisting and removing shell usage in command execution.
CVE-2026-105767 is an OS command injection vulnerability in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu). It arises from improper neutralization of special elements in the project_id or storage_bucket inputs, which are directly interpolated into Bash gcloud storage cp commands. Although the vulnerability allows arbitrary shell command execution on the GitHub Actions runner if an attacker controls these inputs, the only known caller uses repository secrets and runs on trusted triggers, so untrusted input was not known to reach the vulnerable code. The CVSS 4.0 score is low (2.1).
CVE-2026-75937 is a critical OS command injection vulnerability in the web administration interface of Digi International's IX Family devices. An unauthenticated attacker can send a specially crafted HTTP POST request to execute arbitrary OS commands with root privileges. The vulnerability affects multiple versions of the IX Family firmware. Disabling the web server when not configuring the device is recommended as a mitigation.
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, 4.2.x before 4.2.8, 4.3.x before 4.3.5, and 4.4.x before 4.4.3, as used by Amazon SageMaker Unified Studio, might allow an authenticated remote user with project contributor permissions to execute arbitrary commands in another project member's Studio Space and obtain that member's temporary execution role credentials via a crafted connection resource property that is interpolated into a shell invocation without neutralization.
To remediate this issue, users should upgrade to version 2.14.12, 3.9.12, 4.0.11, 4.1.11, 4.2.8, 4.3.5, or 4.4.3, as applicable to the minor line in use. Users on minor lines that have reached end of support must move to a supported minor line, because no patched version will be released for those lines. In Amazon SageMaker Unified Studio, Studio Spaces adopt the latest patch of their minor line on restart once the patched images are deployed, so no version selection is required.
CVE-2026-104859 is an OS command injection vulnerability in the nrwl nx monorepo tool affecting versions from 21.4.0 up to but not including 22.7.8, and from 23.0.0 up to but not including 23.1.1. The vulnerability arises because certain Docker release pipeline commands are constructed as shell command strings that interpolate untrusted configuration values, allowing execution of arbitrary shell commands. This can lead to execution of commands with the release job's privileges, potentially exposing sensitive credentials. The issue is fixed in versions 22.7.8 and 23.1.1.
An OS Command Injection vulnerability (CWE-78) exists in Johnson Controls EasyIO FS32 versions before 3.0b63. This flaw allows an attacker with high privileges to potentially execute arbitrary OS commands. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.6. A patch is available for this issue. The product is a cloud service, so remediation is typically managed by the vendor.
CVE-2026-84682 is a command injection vulnerability in the TDDPv2 service on TP-Link Archer AX90 v1 devices. An unauthenticated attacker on an adjacent network can exploit the setProductVer command handler to execute arbitrary OS commands as root during device boot. This leads to full device compromise with root privileges.
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
TP-Link TL-WR841N version 14 contains an authenticated OS command injection vulnerability in its IPv6 WAN configuration. An authenticated administrator can exploit this flaw by providing a crafted IPv6 Gateway value that is improperly handled in a system command. This may lead to arbitrary command execution on the device, potentially allowing unauthorized access to sensitive information, modification of device settings, or disruption of device operation.
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by crlserver as root on the BoKS Master. BCC and WSI provide network-accessible administration paths and do not require a local sudo or suexec rule; non-root use of cacrl requires such a rule.
An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely
CVE-2026-102112 is a privilege escalation vulnerability in Kiteworks Core that allows an attacker with existing code execution as an unprivileged backend service account to escalate privileges to root and execute arbitrary commands with highest privileges. Exploitation requires local access to the service account. The vulnerability is due to improper neutralization of special elements used in OS commands (CWE-78).
CVE-2026-102114 is a command injection vulnerability in Kiteworks Core that allows a high-privileged authenticated administrator to execute arbitrary OS commands as root on the appliance node. Exploitation requires an administrative account with elevated privileges. The vulnerability affects versions prior to 9.5.0. The CVSS score is 7.2, indicating high severity.
CVE-2026-102120 is a high-severity OS command injection vulnerability in Kiteworks Core affecting versions before 9.5.1. It allows an attacker with existing code execution on one cluster node to escalate privileges and execute OS commands on other nodes within the same cluster. The flaw arises from insufficient input validation in an internal cluster management function, which is not accessible externally and requires prior node access.
Kiteworks Core versions prior to 9.5.0 contain an OS Command Injection vulnerability. This flaw allows an authenticated administrator to upload a specially crafted configuration package that is not properly validated. Exploiting this vulnerability could lead to arbitrary command execution on the underlying system with potentially elevated privileges.