CWE-78

CVEs classified under CWE-78, newest first.

1423 CVEsRSS

CVE-2026-56379High· 8.1

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector G…

▾ Twilightimagemagick · imagemagickEPSS 1.6%via NVD

CVE-2026-55173High· 8.1

4mo ago

AVideo has an incomplete fix of CVE-2026-33482: sanitizeFFmpegCommand still allows a single '&' (background operator), giving OS command execution at the same execAsync sh -c sink

▾ Twilightwwbn · wwbn/avideoEPSS 2.7%via GHSA

CVE-2026-55441High· 8.6

4mo ago

Mise vulnerable to arbitrary command execution via task-include files in an untrusted, config-less repository

▾ Twilightmise · miseEPSS 0.18%via GHSA

CVE-2026-55448Medium· 6.3

4mo ago

Mise's local credential_command executes untrusted config

▾ Sunlitmise · miseEPSS 0.20%via OSV

CVE-2026-47242High· 7.3

4mo ago

net-imap: Net::IMAP: Arbitrary IMAP command injection due to improper input validation (CVE-2026-47242)

A flaw was found in Net::IMAP, a Ruby library that implements Internet Message Access Protocol (IMAP) client functionality. This vulnerability arises from improper input validation when handling ID field values and arguments to the `enable…

▾ TwilightRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 0.18%via CSAF

CVE-2026-46606High· 7.8

4mo ago

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

▾ Twilightglances · glancesEPSS 0.19%via GHSA

CVE-2026-54051Critical· 9.9

4mo ago

Network-AI: Improper Neutralization of Special Elements used in an OS Command

▾ Midnightnetwork-ai · network-aiEPSS 0.47%via GHSA

GHSA-wg5p-8h9p-3mr7High· 8.6

4mo ago

agent-coderag: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

▾ Twilightagent-coderag · agent-coderagvia GHSA

GHSA-vcv2-r9jh-99m5High· 8.8

4mo ago

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

▾ Twilightagentic-flow · agentic-flowvia GHSA

CVE-2026-55849High

4mo ago

@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument

▾ Twilightcyclonedx · @cyclonedx/cyclonedx-npmEPSS 0.24%via GHSA

GHSA-c3xh-98xp-6qhfHigh

4mo ago

githubtoplanguages: Command Injection via Issue Title in Discord Notification Workflow

▾ Twilightgouef · gouef/githubtoplanguagesvia GHSA

GHSA-v847-hxxw-3pxgHigh· 7.8

4mo ago

PraisonAI recipe.run_stream skips dangerous-tool policy enforcement

▾ Twilightpraisonai · praisonaivia GHSA

GHSA-w6h2-fr4q-xvxvHigh· 8.8

4mo ago

PraisonAI: Compute-bridged file tools allow shell command injection

▾ Twilightpraisonai · praisonaivia GHSA

GHSA-p75f-6fp4-p57wCritical· 9.8

4mo ago

PraisonAI: Missing Authentication for Critical Function and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai

▾ Midnightpraisonai · praisonaivia GHSA

GHSA-vjv9-7m7j-h833High· 8.8

4mo ago

npm PraisonAI SandboxExecutor allowedCommands bypass via shell chaining

▾ Twilightpraisonai · praisonaivia GHSA

GHSA-5jv7-2mjm-h6qjHigh· 8.8

4mo ago

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

▾ Twilightpraisonai · praisonaivia GHSA

GHSA-7qw2-w5rc-37x2High· 7.8

4mo ago

PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml

▾ Twilightpraisonai · praisonaivia GHSA

CVE-2026-53848Low· 4.3

4mo ago

OpenClaw: Exec allowlist could miss side effects from transparent command wrappers

▾ Sunlitopenclaw · openclawEPSS 0.18%via GHSA

CVE-2026-53855High· 8.1

4mo ago

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

▾ Twilightopenclaw · openclawEPSS 0.26%via GHSA

CVE-2026-0755Critical· 9.80day

4mo ago

gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)

▾ Hadalgemini-mcp-tool · gemini-mcp-toolEPSS 3.4%via GHSA

CVE-2026-55743Critical· 9.6

4mo ago

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

▾ MidnightEPSS 0.39%via NVD

CVE-2026-55748Medium· 6.0

4mo ago

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters

OpenStack Horizon before 25.7.4 produces scripts for OpenStack RC file downloading that may have a crafted project name with shell metacharacters. NOTE: some parties consider this a security hardening opportunity to address certain types…

▾ Sunlitopenstack · horizonEPSS 0.25%via NVD

CVE-2026-12398High· 7.5

4mo ago

Galaxy_ng: shell injection in legacy role import via unsanitized git ref names

A command injection vulnerability was found in galaxy_ng. The do_git_checkout() function in the legacy role import API (v1) interpolates unsanitized git ref names (branch/tag names) into shell commands executed via subprocess.run() with …

▾ TwilightRed Hat · ansible-automation-platform-24/hub-rhel8EPSS 0.89%via CVEORG

CVE-2026-49402High· 8.1

4mo ago

Deno: Command Injection via spawnSync & spawn on Windows

▾ Twilightdeno · denoEPSS 0.45%via GHSA

GHSA-69qj-pvh9-c5wgHigh· 7.5

4mo ago

yt-dlp: Arbitrary command injection possible if --exec option used with yt-dlp

▾ Twilightyt-dlp · yt-dlpvia GHSA

CVE-2026-9863High· 7.5

4mo ago

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or compromised legacy tar-installed client selected for upgrade or patching…

▾ Twilightfortra · core_privileged_access_manager_serverEPSS 0.60%via NVD

CVE-2026-9862Critical· 9.8

4mo ago

Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service

Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the …

▾ Midnightfortra · core_privileged_access_manager_serverEPSS 0.99%via NVD

CVE-2026-11417High· 7.3PoC

4mo ago

aws-cdk-lib: OS Command Injection in NodejsFunction Bundling

▾ Midnightaws-cdk-lib · aws-cdk-libEPSS 0.99%via GHSA

CVE-2026-6893High· 7.5

5mo ago

A flaw was found in dracut

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracu…

▾ TwilightRed Hat · dracutEPSS 1.3%via NVD

CVE-2026-42563High· 8.0

5mo ago

dulwich: Dulwich: Arbitrary code execution via malicious Git file paths during merge (CVE-2026-42563)

A flaw was found in Dulwich, a pure-Python implementation of Git file formats and protocols. An attacker can exploit this vulnerability by crafting malicious file paths within an untrusted Git branch. When a victim merges this branch, the …

▾ TwilightRed Hat · Red Hat Ansible Automation Platform 2EPSS 0.56%via CSAF