CVE-2026-72589 is a critical OS command injection vulnerability in alseambusher's crontab-ui versions prior to 0.4.3. It allows unauthenticated remote attackers to execute arbitrary system commands by importing a crafted crontab database file via the POST /import endpoint, which accepts arbitrary .db files without validation and overwrites the application database.
CVE-2026-72580 is a critical OS command injection vulnerability in the duhow xiaoai-patch software for Xiaomi smart speakers. The vulnerability exists because the /mute and /unmute API endpoints pass a user-supplied parameter directly to os.system() without sanitization, allowing remote attackers to execute arbitrary system commands. This flaw is due to improper neutralization of special elements used in OS commands (CWE-78). No patch or official remediation has been confirmed yet.
CVE-2026-72579 is an OS command injection vulnerability in NASA HyperCP that allows a network-adjacent attacker to execute arbitrary system commands by intercepting or spoofing responses from a specific NASA data source. The vulnerability requires user interaction and has a high attack complexity. It impacts confidentiality, integrity, and availability of the affected system.
CVE-2026-72573 is an OS command injection vulnerability in the 4xmen pm2panel software. It affects all versions and allows an authenticated remote attacker to execute arbitrary system commands on the host. The vulnerability arises because the pm2panel.js handler passes an unsanitized user input parameter directly to a shell command without validation or escaping. This enables command chaining and potentially full system compromise.
Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP VS Code extension prior to version 0.10.4 could override the path to the Ruby executable, the version manager executables, or the Bundler `Gemfile` used at startup. A malicious repository containing a `.vscode/settings.json` could set these values to attacker-controlled targets. Opening and trusting the repository would then execute code with the privileges of the developer. The Ruby LSP gem and clients of the language server in other editors are not affected. Version 0.10.4 of the Ruby LSP VS Code extension fixes the issue.
NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 execute privileged system commands using `sudo` and `shell=True` directly inside application logic. In environments where passwordless sudo (`NOPASSWD`) is enabled, privileged commands may execute silently without explicit user confirmation. Version 2.0.0 fixes the issue.
NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command execution vulnerability due to unsafe use of `shell=True` with commands that rely on executable resolution through the `PATH` environment variable. An attacker controlling the execution environment can place malicious executables such as sudo earlier in the `PATH`, resulting in execution of attacker-controlled code. Version 2.0.0 fixes the issue.
PHP_CodeSniffer versions prior to 3.13.6 and 4.0.2 contain a command injection vulnerability in the code generating Gitblame, Hgblame, and Svnblame report formats. This vulnerability allows attacker-controlled shell commands to be executed if a file name contains shell metacharacters and is processed by these blame report formats. Users running default or other non-blame reports, or on platforms that disallow such filenames, are not affected. The issue is fixed in versions 3.13.6 and 4.0.2.
sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around line 388 builds a tar shell command by string-concatenating the backup directory path $this->path directly into the command line ('tar czf ' . $backupFileApp . ' ' . BASE_PATH . ' --exclude \"' . $this->path . '\" 2>&1') and passes the result to PHP's exec() with no application of escapeshellarg() and no validation of the path against a safe character set. The $this->path value is read from the sysPass configuration, which is persisted in the database and writable through the admin settings API and the admin UI. An administrator (or an attacker who has obtained an admin API token or admin session) can therefore store a backup path containing shell metacharacters and trigger a backup operation to execute arbitrary OS commands as the web server process user (typically www-data or apache). Because sysPass is a password manager whose sole purpose is to hold credentials for other systems, code execution as the web-server user permits reading sysPass's master password and encryption key from memory or configuration files, decrypting every stored credential in the database, exporting the entire password vault, pivoting to internal systems using the disclosed credentials, and installing persistent backdoors on the password-manager host.
Dell Virtual Storage Integrator for VMware vSphere Client versions prior to 10.11.1.0 contain a critical OS Command Injection vulnerability in the IAPI component. This flaw allows a remote unauthenticated attacker to execute arbitrary OS commands with root privileges, potentially leading to full system compromise. Dell recommends upgrading to a fixed version as soon as possible.
CVE-2026-71312 is a high-severity OS command injection vulnerability in rclone versions prior to 1.75.0. The flaw arises from improper escaping of certain Unicode single-quote characters in PowerShell commands used for server-side hashing of remote SFTP paths. This allows an attacker to inject and execute arbitrary PowerShell commands with the privileges of the victim's SSH account. The issue is fixed in rclone version 1.75.0.
CVE-2026-66297 is an OS Command Injection vulnerability in livebook-dev livebook that allows command injection into generated deployment setup commands. The vulnerability arises because deployment group environment variable values are interpolated into Docker and Fly.io setup commands without proper shell escaping. This can lead to execution of arbitrary commands on the machine of the user who runs the generated command. An attacker must have privileges to set deployment group environment variables to exploit this issue. Kubernetes instructions are not affected due to proper escaping in YAML manifests. The vulnerability affects livebook versions from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.
CVE-2026-70611 is an OS command injection vulnerability in the Electron framework affecting versions prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3. The flaw allows a malicious DevTools extension or script running inside the DevTools frontend to execute native code outside the sandbox via the showItemInFolder feature when DevTools is opened on windows exposed to untrusted content. This issue has been fixed in the specified versions.
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper validation of the command field in MCP server configurations.
IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.
Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting. Because os.system invokes a shell and no quoting (shlex.quote, list-form subprocess) is applied, an admin uploading a crafted backup archive achieves arbitrary OS command execution.
CVE-2026-16022 is an OS command injection vulnerability in @oblique/cli version 15.4.0. The vulnerability arises because the CLI constructs shell commands using string concatenation and executes them with execSync(), inserting a user-controlled project name without proper sanitization. This allows an attacker to execute arbitrary operating system commands by supplying a crafted project name when invoking the CLI.
The backmeup npm package assembles shell command strings by directly concatenating its option values (name, source, destination, filter) - e.g. cmd = "mkdir -p " + path.join(info.destination, info.name) + "; " - and executes the resulting string through a shell via ssh2-exec (locally via child_process, or remotely via SSH when an ssh handle is supplied), rather than using execFile/spawn with an argument array.
HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitDeployer.js executes AppService.exec, interpolating the configured branch value directly into a shell command with no escaping.