gcdRadar
tags/Attack types

command-injection

5 live · 65 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Live5

  1. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

    UnrealIRCd contains an improper neutralization of delimiters vulnerability allowing network users to inject server-to-server commands executed with server authority. CISA added the flaw to its Known Exploited Vulnerabilities catalog following confirmation of active attacks.

    Do:Apply mitigations in accordance with vendor instructions and CISA guidance.

  2. live
    Barracuda Networks Multiple Products CVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection

    Patch now · Exploited · Partly patched · since 10 Nov 2026 · updated 11 Nov 2026 · CVE-2026-111560

    An OS command injection vulnerability in multiple Barracuda Networks products allows authenticated administrators to execute root commands via a crafted timezone value. CISA confirmed exploitation in the wild and added the flaw to its KEV catalog.

    Do:Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.

  3. live9.8
    FortiMail FortiMail command injection allows unauthenticated code execution

    Patch now · Disclosed · since 10 Nov 2026

    An improper neutralization of special elements in a command (CWE‑77) in FortiMail permits an unauthenticated attacker to execute unauthorized code via crafted HA join‑request packets. The vulnerability carries a CVSS v3 score of 9.8, indicating a critical risk.

  4. live
    SignalWire FreeSwitch CVE-2026-116779: SignalWire FreeSwitch Code Injection Vulnerability

    Patch now · Exploited · Partly patched · since 9 Nov 2026 · CVE-2026-116779

    SignalWire FreeSwitch contains a code injection vulnerability allowing configuration disclosure and arbitrary command execution. The issue is actively exploited in the wild and has been added to CISA's KEV catalog.

    Do:Apply mitigations in accordance with vendor instructions and CISA BOD 26-04 guidance.

  5. live9.3
    Barracuda devices CVE-2026-116606: Barracuda authorization bypass and command injection flaws grant root access

    Patch now · Exploited · Patched · since 3 Nov 2026 · updated 10 Nov 2026 · CVE-2026-116606

    Barracuda disclosed two vulnerabilities, including CVE-2026-116606 with a CVSS score of 9.3, that can be chained to bypass authorization controls. Successful exploitation allows attackers to gain root access to susceptible appliances.

    Do:Apply the security updates released by Barracuda to patch the vulnerabilities.

Earlier60

  1. closed5.5
    GitHub Copilot CVE-2026-83953: Command injection vulnerability in Github Copilot

    Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-83953

    AI
  2. closed8.8
    SandboxShellTool CVE-2026-113663: SandboxShellTool newline injection bypasses allowlist, enabling arbitrary command execution

    Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-113663

    AI
  3. closed9.8
    Langflow CVE-2026-104339: IBM Langflow OSS OS command injection vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-104339

    AI
  4. closed8.8
    Langflow CVE-2026-110193: IBM Langflow OSS Agentic Assistant Command Execution Flaw

    Patch now · Disclosed · Patched · since 29 Oct 2026 · CVE-2026-110193

    AI
  5. closed8.5
    ATXP Gemini CLI extension CVE-2026-117560: ATXP Gemini CLI Extension OS Command Injection

    Patch now · Disclosed · since 27 Oct 2026 · CVE-2026-117560

    AI
  6. closed9.2
    Claude Code + SDKs CVE-2026-96620: Claude Agent SDK Command Injection Vulnerability

    Patch now · Disclosed · since 16 Oct 2026 · CVE-2026-96620

    AI
  7. closed8.1
    Langflow CVE-2026-97674: IBM Langflow OSS vulnerable to OS command injection

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97674

    AI
  8. closed9.9
    Langflow Langflow OS Command Injection via MCP Stdio Server Configuration

    Patch now · Disclosed · since 5 Oct 2026 · updated 7 Oct 2026 · CVE-2026-105697

    AI
  9. closed8.5
    Ollama CVE-2026-102697: Ollama Agent Mode Bash Tool Authorization Bypass

    Patch now · Disclosed · since 29 Sep 2026 · CVE-2026-102697

    AI
  10. closed9.8
    Langflow CVE-2026-79724: IBM Langflow OSS remote OS command execution flaw

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-79724

    AI
  11. closed5.3
    GitHub Copilot CVE-2026-81380: GitHub Copilot and VS Code command injection vulnerability

    Patch now · Disclosed · since 8 Sep 2026 · CVE-2026-81380

    AI
  12. closed8.8
    OpenAI Codex OpenAI Codex CLI and Desktop vulnerable to command safety bypass

    Patch now · Disclosed · since 1 Sep 2026 · CVE-2026-19591

    AI
  13. closed7.8
    NVIDIA NemoClaw CVE-2026-65099: OS command injection vulnerability in NVIDIA NemoClaw CLI

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65099

    AI
  14. closed7.8
    NVIDIA NemoClaw CVE-2026-65090: OS command injection vulnerability in NVIDIA NemoClaw NIM management

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65090

    AI
  15. closed7.8
    NVIDIA NemoClaw CVE-2026-65089: OS command injection vulnerability in NVIDIA NemoClaw

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65089

    AI
  16. closed7.8
    NVIDIA NemoClaw CVE-2026-65096: NVIDIA NemoClaw Telegram bridge OS command injection

    Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-65096

    AI
  17. closed8.8
    ClaudeHookBridge CVE-2026-73614: ClaudeHookBridge deny pattern bypass vulnerability

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73614

    AI
  18. closed7.8
    GitHub Copilot CVE-2026-70335: OS command injection vulnerability in GitHub Copilot and Visual Studio Code

    Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-70335

    AI
  19. closed5.3
    MCP servers & tools CVE-2026-19334: Ollama-mcp Local Command Injection Flaw

    Patch now · Disclosed · since 9 Aug 2026 · CVE-2026-19334

    AI
  20. closed9.8
    GPT-SoVITS CVE-2026-63766: OS Command Injection in GPT-SoVITS webui.py

    Patch now · Disclosed · since 20 Jul 2026 · CVE-2026-63766

    AI
  21. closed8.8
    Langflow CVE-2026-14499: IBM Langflow OSS arbitrary command execution via Python Interpreter

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-14499

    AI
  22. closed6.3
    MCP servers & tools CVE-2026-44968: dbt-mcp vulnerability allows flag injection in subprocess

    Patch now · Disclosed · since 16 Jul 2026 · CVE-2026-44968

    AI
  23. closed5.3
    OpenLLM Command Injection in OpenLLM OpenLLM

    Patch now · Disclosed · since 8 Jul 2026 · CVE-2026-15035

    AI
  24. closed9.9
    Flowise CVE-2026-56274: Flowise command injection vulnerability in Custom MCP Server

    Patch now · Disclosed · since 23 Jun 2026 · CVE-2026-56274

    AI
  25. closed8.8
    AnythingLLM CVE-2026-48116: Script execution vulnerability in AnythingLLM agent skill

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-48116

    AI
  26. closed6.3
    Langflow CVE-2026-7687: Langflow CodeParser Command Injection Vulnerability

    Patch now · Disclosed · since 3 May 2026 · CVE-2026-7687

    AI
  27. closed8.8
    LiteLLM CVE-2026-42271: LiteLLM Authenticated Command Execution via MCP Endpoints

    Patch now · Disclosed · since 25 Apr 2026 · updated 8 May 2026 · CVE-2026-42271

    AI
  28. closed5.7
    GitHub Copilot CVE-2026-23653: Command Injection Flaw in GitHub Copilot and VS Code

    Patch now · Disclosed · since 14 Apr 2026 · CVE-2026-23653

    AI
  29. closed7.3
    Chatbox CVE-2026-6130: OS Command Injection in Chatbox AI MCP Server Management

    Patch now · Disclosed · since 12 Apr 2026 · CVE-2026-6130

    AI
  30. closed6.3
    MaxKB MaxKB Model Context Protocol OS Command Injection Vulnerability

    Patch now · Disclosed · since 12 Apr 2026 · CVE-2026-6108

    AI
  31. closed8.7
    KubeAI CVE-2026-34940: Command injection vulnerability in KubeAI inference operator

    Patch now · Disclosed · since 6 Apr 2026 · CVE-2026-34940

    AI
  32. closed6.7
    FastMCP CVE-2025-64340: FastMCP Command Injection via Server Names

    Patch now · Disclosed · since 31 Mar 2026 · CVE-2025-64340

    AI
  33. closed9.1
    Langflow CVE-2026-33475: Langflow Remote Shell Injection in CI/CD Workflows

    Patch now · Disclosed · since 24 Mar 2026 · CVE-2026-33475

    AI
  34. closed9.1
    Claude Code UI CVE-2026-31862: RCE vulnerability in Cloud CLI Claude Code UI

    Patch now · Disclosed · since 11 Mar 2026 · CVE-2026-31862

    AI
  35. closed8.7
    Claude Code UI Cloud CLI WebSocket shell OS command injection vulnerability

    Patch now · Disclosed · since 11 Mar 2026 · CVE-2026-31975

    AI
  36. closed8.7
    Claude Code UI Cloud CLI command injection vulnerability in git-config endpoint

    Patch now · Disclosed · since 11 Mar 2026 · CVE-2026-31861

    AI
  37. closed7.5
    GitHub Copilot GitHub Copilot CLI shell tool arbitrary code execution vulnerability

    Patch now · Disclosed · since 6 Mar 2026 · CVE-2026-29783

    AI
  38. closed7.8
    NVIDIA NeMo CVE-2025-33246: Command injection vulnerability in NVIDIA NeMo Framework

    Patch now · Disclosed · since 18 Feb 2026 · CVE-2025-33246

    AI
  39. closed8.8
    GitHub Copilot CVE-2026-21518: Command Injection Vulnerability in GitHub Copilot and VS Code

    Patch now · Disclosed · since 10 Feb 2026 · CVE-2026-21518

    AI
  40. closed7.7
    Claude Code + SDKs CVE-2026-25723: Claude Code Command Injection Bypass

    Patch now · Disclosed · since 6 Feb 2026 · CVE-2026-25723

    AI
  41. closed7.8
    MCP servers & tools CVE-2026-25546: Godot MCP Command Injection Vulnerability

    Patch now · Disclosed · since 4 Feb 2026 · CVE-2026-25546

    AI
  42. closed7.7
    Claude Code + SDKs CVE-2026-24887: Claude Code command injection in find command bypasses prompts

    Patch now · Disclosed · since 3 Feb 2026 · CVE-2026-24887

    AI
  43. closed9.8
    MCP servers & tools CVE-2025-15063: Ollama MCP Server Command Injection RCE Vulnerability

    Patch now · Disclosed · since 23 Jan 2026 · CVE-2025-15063

    AI
  44. closed8.7
    Claude Code + SDKs CVE-2025-66032: Claude Code Command Validation Bypass

    Patch now · Disclosed · since 3 Dec 2025 · CVE-2025-66032

    AI
  45. closed9.8
    MCP servers & tools MCP Watch Command Injection Vulnerability CVE-2025-66401

    Patch now · Disclosed · since 1 Dec 2025 · CVE-2025-66401

    AI
  46. closed7.7
    Claude Code + SDKs CVE-2025-65099: Claude Code vulnerable to command execution prior to startup trust dialog

    Patch now · Disclosed · since 19 Nov 2025 · CVE-2025-65099

    AI
  47. closed5.4
    FastMCP CVE-2025-62801: FastMCP command injection in Cursor installer

    Patch now · Disclosed · since 29 Oct 2025 · CVE-2025-62801

    AI
  48. closed7.5
    MCP servers & tools CVE-2025-58358: Markdownify MCP server command injection vulnerability

    Patch now · Disclosed · since 4 Sep 2025 · CVE-2025-58358

    AI
  49. closed7.8
    GitHub Copilot CVE-2025-53773: Command Injection Vulnerability in GitHub Copilot and Visual Studio

    Patch now · Disclosed · since 12 Aug 2025 · CVE-2025-53773

    AI
  50. closed6.3
    Agno CVE-2025-8665: OS command injection in Agno MCP Tools

    Patch now · Disclosed · since 6 Aug 2025 · CVE-2025-8665

    AI
  51. closed8.7
    Claude Code + SDKs CVE-2025-54795: Claude Code Command Prompt Execution Bypass

    Patch now · Disclosed · since 4 Aug 2025 · updated 5 Aug 2025 · CVE-2025-54795

    AI
  52. closed7.5
    MCP servers & tools Command Injection in Lara Translate MCP Server

    Patch now · Disclosed · since 21 Jul 2025 · CVE-2025-53832

    AI
  53. closed8.9
    MCP servers & tools Command Injection in GitHub Kanban MCP Server

    Patch now · Disclosed · since 14 Jul 2025 · CVE-2025-53818

    AI
  54. closed9.6
    MCP servers & tools CVE-2025-6514: mcp-remote vulnerable to OS command injection

    Patch now · Disclosed · since 9 Jul 2025 · CVE-2025-6514

    AI
  55. closed7.5
    MCP servers & tools CVE-2025-53372: Command injection vulnerability in node-code-sandbox-mcp

    Patch now · Disclosed · since 8 Jul 2025 · CVE-2025-53372

    AI
  56. closed6.0
    MCP servers & tools CVE-2025-52573: iOS Simulator MCP Server Command Injection Vulnerability

    Patch now · Disclosed · since 26 Jun 2025 · CVE-2025-52573

    AI
  57. closed8.8
    LlamaIndex CVE-2024-4181: LlamaIndex RunGptLLM Command Injection

    Patch now · Disclosed · since 16 May 2024 · CVE-2024-4181

    AI
  58. closed9.8
    LoLLMs CVE-2024-4078: LoLLMS Command Injection Vulnerability

    Patch now · Disclosed · since 16 May 2024 · CVE-2024-4078

    AI
  59. closed9.8
    LlamaIndex CVE-2024-3271: LlamaIndex command injection vulnerability

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-3271

    AI
  60. closed8.6
    Gradio CVE-2024-1540: Gradio Workflow Command Injection Vulnerability

    Patch now · Disclosed · since 27 Mar 2024 · CVE-2024-1540

    AI