CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
359 vulnerabilities with CWE-88
CVE-2026-47365
CRITICAL
Webpros WordPress-Toolkit < 6.11.0 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVSS 9.9
CVE-2026-47250
MEDIUM
mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration
CVSS 6.1
CVE-2026-46529
HIGH
PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen
CVE-2026-53694
HIGH
Potential local privileges escalation through argument injection in the nxchmod.sh script
CVE-2026-52750
HIGH
Ghidra < 12.1- Command Injection via URL Annotation Click
CVSS 7.8
CVE-2026-11332
HIGH
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
CVSS 7.8
CVE-2026-41013
HIGH
CloudFoundry Foundation diego-release - Argument Injection via SMB Volume Mount Option Bypass
CVSS 8.1
CVE-2026-49373
HIGH
Jetbrains TeamCity < 2026.1 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVSS 7.1
CVE-2026-48116
HIGH
AnythingLLM: RCE via ripgrep --pre argument injection in filesystem-search-files agent skill
CVSS 7.5
CVE-2026-44712
HIGH
pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent
CVSS 8.2
CVE-2026-44450
CRITICAL
Lumiverse: RCE via MCP stdio argument injection
CVSS 9.9
CVE-2026-44449
CRITICAL
Lumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape
CVSS 9.1
CVE-2026-3515
HIGH
Argument Injection in prefecthq/prefect
CVSS 8.5
CVE-2026-47114
HIGH
IINA < 1.4.3 Command Execution via iina://open URL Scheme
CVSS 8.8
CVE-2026-8773
MEDIUM
linlinjava litemall Database Setting DbUtil.java load argument injection
CVSS 4.7
CVE-2026-46483
LOW
Vim: Command injection in tar#Vimuntar via missing shellescape {special} flag
CVSS 3.6
CVE-2026-45158
CRITICAL
OPNsense: Command Injection via Attacker-Controlled DHCP Config
CVSS 9.1
CVE-2026-44193
CRITICAL
OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
CVSS 9.1
CVE-2026-42266
HIGH
jupyterlab: Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
CVSS 8.8
CVE-2026-31230
CRITICAL
Adversarial Robustness Toolbox <=1.20.1 - Command Injection
CVSS 9.8
CVE-2026-25690
MEDIUM
Fortinet FortiDeceptor - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVSS 4.3
CVE-2026-43893
HIGH
exiftool-vendored: Argument injection via newline characters in tag names
CVSS 8.2
CVE-2026-45181
MEDIUM
Hex-rays Ida < 9.3sp2 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CVSS 6.5
CVE-2026-42601
CRITICAL
ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView
CVSS 9.8
CVE-2026-41570
HIGH
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
CVSS 7.8
Details
Vulnerabilities
359