CVE-2026-77521 is a critical OS command injection vulnerability in MaxKB, an open-source AI assistant for enterprise. Versions prior to 2.10.5-lts allow untrusted input to execute shell commands without human approval due to improper sandboxing and command execution controls. This can lead to full system compromise by executing arbitrary commands as the application user. The issue is fixed in version 2.10.5-lts.
CVE-2026-79916 is a critical OS command injection vulnerability in MaxKB, an open-source AI assistant for enterprise. Authenticated workspace members prior to version 2.10.5-lts can inject control characters into AWS credentials fields, leading to execution of attacker-controlled commands as root. The vulnerability is fixed in version 2.10.5-lts.
luci-app-advanced-reboot is a LuCI (web interface) application for OpenWrt that provides a way to reboot your router into an alternative firmware partition or perform reboot operations directly from the web UI. Prior to 1.1.2-6, the luci-app-advanced-reboot read ACL in applications/luci-app-advanced-reboot/root/usr/share/rpcd/acl.d/luci-app-advanced-reboot.json grants rpcd file.exec permission for the general shell interpreter /bin/sh. An authenticated delegated session with that read ACL can supply caller-controlled params; rpcd authorizes the executable path and passes those arguments to the shell, allowing arbitrary commands to execute as root. Builds without the /bin/sh exec grant, including the checked openwrt-24.10 and openwrt-23.05 branches, are not affected by this specific chain. This vulnerability is fixed in 1.1.2-6.
Email::Sender::Transport::Sendmail versions before 2.602 for Perl contain an OS command injection vulnerability on Windows platforms. This occurs because envelope sender and recipient addresses are concatenated into a single command string passed to the shell, allowing an attacker controlling these headers to execute arbitrary commands as the sending process. Other platforms are not affected as they invoke sendmail directly without shell interpretation.
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2/exec/host/schedule_vulnerability_scan.lua accept the scan_ports parameter without an administrator gate and pass it through validateSingleWord, which permits shell metacharacters. scripts/lua/modules/vulnerability_scan/vs_utils.lua then concatenates scan_ports into an nmap command in nmap_scan_host and executes the command through ntop.execCmd or ntop.execCmdAsync and popen. Any authenticated non-admin user can execute operating-system commands as the ntopng process account when nmap is available. Because the endpoints accept GET requests while ntopng's CSRF validation applies to POST request bodies, an attacker can also trigger the command through a logged-in user's browser without possessing ntopng credentials. This issue is fixed in version 6.7.260717.
An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.
Temporal Server compiles a Worker Controller Instance module into its Worker Service, and that module registers a compute provider named subprocess whose function is to launch a worker by running a command on the machine hosting the Worker Service. The program name and the argument vector that provider executes are taken from the compute provider configuration supplied in the caller's request rather than from operator configuration. An authenticated caller holding only a write role in a single namespace can therefore configure a worker deployment version so that the Worker Service executes a command of the caller's choosing on its own host, under the account the server process runs as. Execution is immediate rather than deferred: the configuration handler invokes every provider using the invoke strategy directly after validating the submitted specification, so no scaling decision, task arrival, or unusual request sequence is required. Because the Worker Service process holds the persistence credentials for every namespace in the cluster and the cluster's TLS material, the consequence reaches beyond the caller's namespace to the cluster as a whole. The provider is present in the official temporal-server binaries and container images for the affected releases. The only control that can keep it unreachable is the compute provider allowlist, the per-namespace dynamic configuration setting workercontroller.compute_providers.enabled, and that control does not deny by default: its default value is an unset list, and the allowlist check is skipped entirely when the value is unset, so every registered compute provider is permitted, this one included. To determine whether a deployment is affected, check the following together. The deployed Temporal Server version is 1.31.0 or later and earlier than 1.31.3. The Worker Service is running, which it is in the default service set and therefore in a stock deployment. The effective per-namespace value of workercontroller.compute_providers.enabled is either unset or contains subprocess. And authorization is configured, meaning a real authorizer and claim mapper are in place; a deployment running with no authorizer already grants every caller unrestricted access to every namespace, so it has no namespace boundary for this to cross. Note that the separate per-namespace dynamic configuration setting workercontroller.enabled does not gate the affected path. It defaults to false, and a deployment that has never set it in any namespace is still affected, which was confirmed by running an affected release with no value for that setting present anywhere in dynamic configuration. To look for a compute configuration that is already attached, call DescribeWorkerDeploymentVersion for each worker deployment version in each namespace and check whether any scaling group's compute provider type is subprocess.
IBM Guardium Data Protection version 12.2 contains a vulnerability that allows remote attackers to execute arbitrary operating system commands due to improper neutralization of special elements in OS commands. This vulnerability is classified as CWE-78 (OS Command Injection) and has a high severity score of 8.1. It requires high attack complexity and no privileges or user interaction, making remote exploitation possible but somewhat difficult. No public exploits or patches are currently documented.
IBM Guardium Data Protection version 12.2 contains an OS command injection vulnerability in its Universal Connector plugin upload functionality. A privileged authenticated attacker can exploit this flaw by supplying a malicious filename that is executed as part of a shell command, potentially allowing arbitrary command execution with root privileges.
IBM Guardium Data Protection version 12.2 contains a vulnerability that allows remote attackers to execute arbitrary operating system commands due to improper neutralization of special elements in OS commands. This vulnerability is classified as CWE-78 (OS Command Injection) and has a high severity score of 8.1. No public exploits or patches are currently documented.
IBM Guardium Data Protection version 12.2 contains an OS command injection vulnerability that allows a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements in OS commands. This vulnerability has a high severity rating with a CVSS score of 8.8. No public exploits or patches are currently documented.
IBM Guardium Data Protection version 12.2 contains a command injection vulnerability in the import remotelog_config file CLI command. A highly privileged authenticated user can exploit this flaw by injecting shell commands through the filename parameter, potentially leading to arbitrary command execution with root privileges. This vulnerability impacts the confidentiality, integrity, and availability of the affected system.
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI command. An authenticated privileged CLI user can inject arbitrary shell commands through the alias input, resulting in command execution with root privileges.
IBM Guardium Data Protection version 12.2 contains an OS command injection vulnerability (CWE-78) that allows an authenticated user with low privileges to execute arbitrary system commands due to improper validation of user-supplied input. This vulnerability has a medium severity with a CVSS score of 6.3.
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality. Successful exploitation could allow an attacker to execute unauthorized commands and impact the confidentiality, integrity, and availability of the affected system.
CVE-2026-62943 is an OS command injection vulnerability in the digint btrbk tool affecting versions from 0.29.0 up to but not including 0.32.7. The vulnerability arises because the ssh_filter_btrbk.sh script uses an allowlist pattern that lacks an end-of-string anchor, allowing a restricted SSH user to append additional commands and execute arbitrary commands with backup-target SSH account privileges. Deployments not using ssh_filter_btrbk.sh in authorized_keys are not affected. This issue is fixed in version 0.32.7.
A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command injection. It is possible to initiate the attack remotely. The pull request to fix this issue awaits acceptance.
CVE-2025-14754 is an OS command injection vulnerability in IBM Cloud Pak for Data version 5.1.2. It allows an authenticated user to execute arbitrary commands with elevated privileges due to improper validation of user-supplied input. This vulnerability has a high severity score of 8.8 and impacts confidentiality, integrity, and availability of the affected system.