fast-agent versions prior to 0.7.21 have an OS command injection vulnerability in the serve component when started with the --shell option. The server listens on all interfaces (0.0.0.0) on port 8000 without authentication, allowing unauthenticated remote clients to invoke the /mcp endpoint and execute operating system commands as the server user. Without the --shell option, clients can still access the operator's model and configured MCP tools. This issue is fixed in version 0.7.21.
GeoNode versions prior to 5.1.0 contain an OS command injection vulnerability (CWE-78) that allows a low-privileged remote user to execute arbitrary operating system commands by supplying a crafted vector file layer name during upload. This vulnerability is fixed in GeoNode version 5.1.0.
GROBID versions prior to 0.9.1 contain an OS command injection vulnerability in the Linux non-server PDF conversion path. An attacker can craft a malicious PDF filename containing a single quote to break out of the intended command quoting, leading to arbitrary command execution with the privileges of the GROBID process. The REST server path is not affected. This vulnerability is fixed in version 0.9.1.
OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before 2026-07-28 might allow an authenticated remote user who is permitted to invoke the Rex-RO or Rex-RW SSM document to execute arbitrary commands as root on the managed instance, bypassing Cedar policy enforcement.
To remediate this issue, users should delete any Rex-RO and Rex-RW SSM documents created from the example script, in each account and Region where it was run.
CVE-2026-123855 is a high-severity OS command injection vulnerability in JetBrains Toolbox App versions before 3.6.1. The flaw allows command injection via enterprise configuration URLs. It was fixed in version 3.6.1.
CVE-2026-123837 is an OS command injection vulnerability in JetBrains IntelliJ IDEA versions before 2026.3 and 2026.2.1. The flaw allows command injection via Tomcat run configurations on Windows Subsystem for Linux (WSL) when working with untrusted projects. This vulnerability has a high severity with a CVSS score of 7.8, impacting confidentiality, integrity, and availability. A fix is available in version 2026.3.
CVE-2026-113663 is an OS command injection vulnerability in the open-source AgentOS project ag2. Versions from 0.13.2 up to but not including 1.1.1 are affected. The vulnerability arises because the ShellAdapter filtering mechanism fails to block newline and carriage-return characters, allowing an attacker to inject additional shell commands. This can lead to arbitrary command execution with the privileges of the agent process, impacting confidentiality, integrity, and availability. The issue is fixed in ag2 version 1.1.1.
CVE-2026-116779 is a critical command injection vulnerability in SignalWire FreeSWITCH prior to version 1.11.3. The flaw arises from improper handling of inbound SIP MESSAGE requests, allowing an attacker with an authenticated profile to execute arbitrary FreeSWITCH API commands, including operating system commands, with daemon privileges. This can lead to configuration disclosure, arbitrary call control, and full command execution. The vulnerability is fixed in FreeSWITCH version 1.11.3.
CVE-2026-54143 is a critical OS command injection vulnerability in the open-source OpenHuman agent by tinyhumansai. Versions prior to 0.57.13 allow an attacker who can send messages to a configured external channel to create persistent shell cron jobs without user approval. These jobs execute with the privileges of the OpenHuman runtime user. The vulnerability also permits leading environment assignments that can redirect allowed commands to executable helpers already present on the host. This can lead to unauthorized persistent command execution and compromise of data and resources accessible to OpenHuman. The issue is fixed in version 0.57.13.
CVE-2026-82413 is a command injection vulnerability in ntopng, a network traffic monitoring application, affecting versions prior to 6.7.260717. The flaw arises from insufficient validation of the scan_ports parameter in certain Lua scripts, allowing authenticated users or unauthenticated users if login is disabled, to inject shell metacharacters. This leads to arbitrary command execution with the privileges of the ntopng service account when nmap is installed. The issue is fixed in version 6.7.260717.
CVE-2026-123025 is a critical OS Command Injection vulnerability in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin up to version 4.17. A remote authenticated user with privileges to issue or renew certificates via the WebGUI or API can execute arbitrary commands as root due to unsafe interpolation of user-controlled fields into shell commands without validation or escaping.
CVE-2026-108387 is a high-severity OS command injection vulnerability in radare2, a UNIX-like reverse engineering framework. Versions prior to 6.2.2 allow attacker-controlled data from certain binary format plugins to influence the bclass field, leading to execution of arbitrary commands with the privileges of the radare2 process. This occurs when opening or analyzing crafted Pebble or Sega Mega Drive binaries that cause radare2 to reopen inputs via the debug I/O plugin and pass malicious arguments to execvp(). The issue is fixed in version 6.2.2.
tsParticles is a TypeScript library for creating highly customizable particle animations. From 4.0.0 until 4.3.2, the stable publish workflow interpolates steps.release.outputs.body directly into an echo command in Bash source before writing RAW_RELEASE.md. Contributor-controlled shell metacharacters in generated release-note text can therefore execute when a maintainer starts a stable release, allowing modification of generated artifacts or workspace scripts and affecting later release steps that hold GITHUB_TOKEN and write permissions. This issue is fixed in version 4.3.2.
Node Version Manager (nvm) versions 0.39.6 through 0.40.8 contain an OS command injection vulnerability in the handling of remote LTS aliases. The vulnerability arises because the version column from the mirror's index.tab file is stored without validation and later evaluated in shell arithmetic, allowing command substitution execution under bash and zsh. Exploitation requires use of a hostile mirror or man-in-the-middle attack and running affected nvm commands. The issue is fixed in version 0.41.0 by restricting arithmetic evaluation to numeric offsets and dropping invalid version strings.
ZohoCorp ManageEngine Key Manager Plus versions before 7151 were vulnerable to a Command Injection vulnerability that allowed authenticated users with certificate deployment privileges to execute arbitrary commands through specially crafted input when configuring a deployment target.
An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.
Successful exploitation may allow arbitrary command execution on the affected device.
Network UPS Tools (nut) versions 2.8.3 through 2.8.5 contain an OS command injection vulnerability in the upsmon component. The upsmon client inserts the server-supplied ups.alarm value into shell commands executed by notify functions. If an operator configures NOTIFYCMD with EXEC in NOTIFYFLAG ALARM, shell metacharacters in the alarm text can be executed, allowing arbitrary command execution as the upsmon user, often root. This can be exploited via a malicious or compromised upsd server, a man-in-the-middle on an unencrypted connection, or a compromised UPS device. The vulnerability is fixed in version 2.8.6.
Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
CVE-2026-105978 is a high-severity vulnerability in Welotec TK100 devices that allows a remote attacker with high privileges to perform OS command injection through improper input validation in management control functions. Successful exploitation enables execution of arbitrary commands with root privileges. Fixed versions are 3.5.116, 1.0.124, and 1.0.123.