CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

mise permits untrusted local configuration to override default shell arguments

flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

PraisonAI: Shell command allowlist bypass via find -exec built-in action

Duplicate Advisory: PraisonAI: Shell command allowlist bypass via find -exec built-in action

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Duplicate Advisory: Flowise contains an unauthenticated sandbox escape

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Duplicate Advisory: knowns vulnerable to command injection

shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

simple-git unsafe-operation guard does not block trailer command configuration

simple-git allows command execution through unblocked Git configuration includes

@nx/docker: OS command injection in the @nx/docker release pipeline

Nx: OS command injection via git revisions and remote refs

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

virtualenv bash and fish activation scripts execute commands embedded in paths

virtualenv: Command injection via --prompt in activate.bat (batch activator)

league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal

code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)

CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers

Jenkins Git client Plugin has an OS command injection vulnerability on agents