CWE-77: Command Injection vulnerabilities

A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was detected in PicoClaw up to 0.2.4. Impacted is an unknown function of the file /api/gateway/restart of the component Web Launcher Management Plane. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability has been found in Divyanshu-hash GitPilot-MCP up to 9ed9f153ba4158a2ad230ee4871b25130da29ffd. This impacts the function repo_path of the file main.py. Such manipulation of the argument command leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-41265 is a critical command injection vulnerability in FlowiseAI's Flowise product versions prior to 3.1.0. The flaw exists in the run method of the Airtable_Agents class, where an LLM-generated Python script is evaluated without proper sandboxing. An unauthenticated attacker can use prompt injection to cause the LLM to generate and execute malicious Python code on the server. This vulnerability allows remote code execution with high impact on confidentiality, integrity, and availability. The issue is fixed in version 3.1.0.

CVE-2026-41304 is a command injection vulnerability in WWBN AVideo versions 29.0 and below. The vulnerability exists in the CloneSite plugin's cloneServer.json.php endpoint, where user input from the 'url' parameter is unsafely concatenated into a shell command executed via exec(). This allows an attacker to inject arbitrary shell commands, leading to remote code execution on the server. A fix for this issue is included in commit 473c609fc2defdea8b937b00e86ce88eba1f15bb.

Lawnchair is a free, open-source home app for Android. Prior to commit fcba413f55dd47f8a3921445252849126c6266b2, command injection in release_update.yml workflow dispatch input allows arbitrary code execution. Commit fcba413f55dd47f8a3921445252849126c6266b2 patches the issue.

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command

CVE-2026-3518 is a high-severity OS command injection vulnerability in the API of Progress Software LoadMaster version 7.2.37.0. It allows an authenticated attacker with full permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command. The vulnerability requires authentication with high privileges and does not involve user interaction. No official patch or remediation guidance has been published yet.

CVE-2026-3517 is a high-severity OS command injection vulnerability in Progress Software LoadMaster version 7.1.32.0. It affects the API component of the product, allowing an authenticated attacker with 'Geo Administration' permissions to execute arbitrary commands on the LoadMaster appliance. The vulnerability arises from unsanitized input in the 'addcountry' command. There is no official patch or remediation level currently confirmed by the vendor. No known exploits are reported in the wild at this time.

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

Anviz CX2 Lite is vulnerable to an authenticated command injection via a filename parameter that enables arbitrary command execution (e.g., starting telnetd), resulting in root‑level access.

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain root-level access.

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to gain root-level access.

Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio Code allows an authorized attacker to disclose information over a network.

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.