CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Monthly
Local privilege escalation in cifs-utils lets an unprivileged local user obtain root on affected hosts by injecting unauthorized options into a privileged CIFS mount. When a root-owned service mounts a Common Internet File System share using a credentials file whose contents the attacker can control or influence - for example a file that is world-writable or lives in an attacker-owned path - cifs-utils assembles those unsanitized values into the mount option string, so the attacker can slip in extra options that bypass permission checks and cause files to be executed with administrative privileges. The flaw is tracked as CWE-88 (argument/option injection) with a CVSS of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H); exploitation requires an existing low-privilege local account (authenticated, per PR:L) and a deployment where such a privileged, credentials-file-driven CIFS mount workflow exists, so internet-facing hosts that do not mount attacker-influenced CIFS shares are not at risk. No public exploit code or confirmed active exploitation was identified at time of analysis, and Red Hat has published advisory and Bugzilla tracking pages for RHEL 6 through 10 and OpenShift Container Platform 4.
Arbitrary file read in GitPython before 3.2.0 occurs when a vulnerable application clones an attacker-controlled repository and then calls Head.checkout() on the repository's default branch; a branch named like --pathspec-from-file=<path> is parsed by Git as an option rather than a branch, causing readable file contents to be leaked through GitCommandError messages. This is a credible but conditional information-disclosure flaw, not a drop-everything emergency: only confidentiality is affected, exploitation requires the target to process untrusted repositories and surface error output, and no public exploit identified at time of analysis. Unauthenticated network exploitation is possible per the PR:N vector, and the vendor patch is GitPython 3.2.0.
Remote code execution in GitPython 3.1.30 through 3.1.x allows unauthenticated attackers controlling the positional refspec argument to Remote.pull() to execute arbitrary OS commands via a crafted --upload-pack option, bypassing the library's keyword-only unsafe-option guard. The flaw affects local-path and SSH transports and is fixed in 3.2.0; no public exploit code has been identified at time of analysis, but the vulnerability carries a CVSS 4.0 base score of 9.2 and requires the calling application to pass attacker-controlled data as the positional refspec.
Authenticated low-privileged users of Hestia Control Panel 1.9.7 through 1.10.4 who own at least one web domain can escalate to root by injecting a single quote into a custom document-root value, which update_object_value() fails to escape before writing it to the user's web.conf file. The forged PATH field is later loaded by the root-privileged v-search-user-object script via parse_object_kv_list_non_eval() - which allows reserved shell-variable names and replaces PATH globally - and the subsequent invocation of 'column' without an absolute path executes an attacker-supplied binary placed in the injected search path, yielding arbitrary code execution as root with a scope change (S:C) and full confidentiality, integrity and availability impact. The flaw is fixed in Hestia Control Panel 1.10.5; no public exploit code was identified at time of analysis, and the realistic threat model is multi-tenant/shared hosting or a malicious insider rather than an anonymous attacker, since a provisioned panel account with web-domain capability is mandatory.
Local privilege escalation in Windows Error Reporting allows an authenticated attacker holding a low-privileged account on the host to raise their privileges to SYSTEM-level by supplying crafted input containing argument delimiters to the reporting component (CWE-88 argument injection). Affected are unpatched Windows 10 (21H2, 22H2), Windows 11 (23H2, 24H2, 25H2, 26H1, 26H2) and Windows Server 2022/2025 installations below the vendor's fixed build levels. Successful exploitation yields high confidentiality, integrity and availability impact, but the attack is strictly local with a prior-authentication prerequisite (AV:L, PR:L, UI:N, AC:L), so it functions as a post-compromise escalation step rather than an initial-access vector; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, and a vendor patch is available.
Arbitrary code execution is possible in JFrog CLI when specific, non-default configurations are combined with an argument-injection weakness (CWE-88) that allows attacker-influenced input to be incorporated into arguments passed to an underlying command. The flaw carries a 9.0 base score with the vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, meaning the vector formally allows unauthenticated, no-interaction network exploitation, but the High attack complexity reflects the configuration preconditions that gate it rather than ease of use. Only environments running JFrog CLI are in scope - typically developer workstations and CI/CD pipelines that interact with JFrog Artifactory/Platform - and no public exploit has been identified at time of analysis.
Argument injection in the DDNS configuration handler of the Netcore NR268 consumer router (firmware 1.7.121109) lets an authenticated, low-privilege user manipulate the Hostname parameter sent to /router/DDNSset.cgi, which is then passed unsanitized into an execvp call and can result in arbitrary command execution on the device. Because the CVSS vector shows PR:L, the attacker must first hold valid low-level credentials or a session on the device web interface, and the router's management interface must be reachable - exposure is far greater where the admin UI is internet-facing or default credentials remain unchanged. No vendor patch has been identified at time of analysis and no public exploit code has been confirmed, though the flaw is documented in a public GitHub write-up and a VulDB entry, making details discoverable.
Databasement instances before 1.8.2 allow an authenticated user to achieve remote code execution by injecting path-redirecting client options (such as mariadb-dump --result-file, -r, --tab, pg_dump --file, mongodump --out, or redis-cli --rdb/--eval) into the arguments passed to the backup dump binary. Shell quoting prevents classic OS command injection, but argument injection alone is sufficient: by directing the dump output to a web-served, PHP-executing path such as /app/public/index.php, the attacker writes code that the web server later executes. Authentication is required (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8), publicly available exploit code exists, and success depends on the chosen output path being both web-accessible and interpretable as code; no evidence of confirmed active exploitation was provided.
Argument injection in the AI translation feature of SumatraPDF 3.6.1 and earlier allows text placed in a document selection or clipboard to be interpreted as command-line flags when an agentic CLI backend (Grok, Claude Code, or Codex) is configured as the translation provider. Because the vulnerable code builds the child process command line with quote-only escaping, attacker-controlled text can smuggle in flags that alter the model, working directory, approval mode, or sandbox settings used by the launched CLI. Exploitation is local and requires the user to actively invoke the translate/AI-chat action on the crafted text, and only affects installations where one of those agentic CLI backends is installed and selected; no public exploit code was identified at time of analysis, and the issue is not in CISA KEV.
Authenticated argument injection in IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 (including the containerized editions) allows a remote attacker who already holds valid credentials to slip crafted parameters into command or process arguments and trigger unauthorized actions, with high impact to confidentiality, integrity, and availability (CVSS 8.8). Exploitation requires authenticated access (CVSS vector PR:L) and no user interaction (UI:N), so the exposed population is limited to existing platform users rather than anonymous internet traffic. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (no CISA KEV listing), but a vendor patch is available and the affected systems are typically high-value identity infrastructure, making prompt remediation worthwhile.
Local privilege escalation in cifs-utils lets an unprivileged local user obtain root on affected hosts by injecting unauthorized options into a privileged CIFS mount. When a root-owned service mounts a Common Internet File System share using a credentials file whose contents the attacker can control or influence - for example a file that is world-writable or lives in an attacker-owned path - cifs-utils assembles those unsanitized values into the mount option string, so the attacker can slip in extra options that bypass permission checks and cause files to be executed with administrative privileges. The flaw is tracked as CWE-88 (argument/option injection) with a CVSS of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H); exploitation requires an existing low-privilege local account (authenticated, per PR:L) and a deployment where such a privileged, credentials-file-driven CIFS mount workflow exists, so internet-facing hosts that do not mount attacker-influenced CIFS shares are not at risk. No public exploit code or confirmed active exploitation was identified at time of analysis, and Red Hat has published advisory and Bugzilla tracking pages for RHEL 6 through 10 and OpenShift Container Platform 4.
Arbitrary file read in GitPython before 3.2.0 occurs when a vulnerable application clones an attacker-controlled repository and then calls Head.checkout() on the repository's default branch; a branch named like --pathspec-from-file=<path> is parsed by Git as an option rather than a branch, causing readable file contents to be leaked through GitCommandError messages. This is a credible but conditional information-disclosure flaw, not a drop-everything emergency: only confidentiality is affected, exploitation requires the target to process untrusted repositories and surface error output, and no public exploit identified at time of analysis. Unauthenticated network exploitation is possible per the PR:N vector, and the vendor patch is GitPython 3.2.0.
Remote code execution in GitPython 3.1.30 through 3.1.x allows unauthenticated attackers controlling the positional refspec argument to Remote.pull() to execute arbitrary OS commands via a crafted --upload-pack option, bypassing the library's keyword-only unsafe-option guard. The flaw affects local-path and SSH transports and is fixed in 3.2.0; no public exploit code has been identified at time of analysis, but the vulnerability carries a CVSS 4.0 base score of 9.2 and requires the calling application to pass attacker-controlled data as the positional refspec.
Authenticated low-privileged users of Hestia Control Panel 1.9.7 through 1.10.4 who own at least one web domain can escalate to root by injecting a single quote into a custom document-root value, which update_object_value() fails to escape before writing it to the user's web.conf file. The forged PATH field is later loaded by the root-privileged v-search-user-object script via parse_object_kv_list_non_eval() - which allows reserved shell-variable names and replaces PATH globally - and the subsequent invocation of 'column' without an absolute path executes an attacker-supplied binary placed in the injected search path, yielding arbitrary code execution as root with a scope change (S:C) and full confidentiality, integrity and availability impact. The flaw is fixed in Hestia Control Panel 1.10.5; no public exploit code was identified at time of analysis, and the realistic threat model is multi-tenant/shared hosting or a malicious insider rather than an anonymous attacker, since a provisioned panel account with web-domain capability is mandatory.
Local privilege escalation in Windows Error Reporting allows an authenticated attacker holding a low-privileged account on the host to raise their privileges to SYSTEM-level by supplying crafted input containing argument delimiters to the reporting component (CWE-88 argument injection). Affected are unpatched Windows 10 (21H2, 22H2), Windows 11 (23H2, 24H2, 25H2, 26H1, 26H2) and Windows Server 2022/2025 installations below the vendor's fixed build levels. Successful exploitation yields high confidentiality, integrity and availability impact, but the attack is strictly local with a prior-authentication prerequisite (AV:L, PR:L, UI:N, AC:L), so it functions as a post-compromise escalation step rather than an initial-access vector; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, and a vendor patch is available.
Arbitrary code execution is possible in JFrog CLI when specific, non-default configurations are combined with an argument-injection weakness (CWE-88) that allows attacker-influenced input to be incorporated into arguments passed to an underlying command. The flaw carries a 9.0 base score with the vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, meaning the vector formally allows unauthenticated, no-interaction network exploitation, but the High attack complexity reflects the configuration preconditions that gate it rather than ease of use. Only environments running JFrog CLI are in scope - typically developer workstations and CI/CD pipelines that interact with JFrog Artifactory/Platform - and no public exploit has been identified at time of analysis.
Argument injection in the DDNS configuration handler of the Netcore NR268 consumer router (firmware 1.7.121109) lets an authenticated, low-privilege user manipulate the Hostname parameter sent to /router/DDNSset.cgi, which is then passed unsanitized into an execvp call and can result in arbitrary command execution on the device. Because the CVSS vector shows PR:L, the attacker must first hold valid low-level credentials or a session on the device web interface, and the router's management interface must be reachable - exposure is far greater where the admin UI is internet-facing or default credentials remain unchanged. No vendor patch has been identified at time of analysis and no public exploit code has been confirmed, though the flaw is documented in a public GitHub write-up and a VulDB entry, making details discoverable.
Databasement instances before 1.8.2 allow an authenticated user to achieve remote code execution by injecting path-redirecting client options (such as mariadb-dump --result-file, -r, --tab, pg_dump --file, mongodump --out, or redis-cli --rdb/--eval) into the arguments passed to the backup dump binary. Shell quoting prevents classic OS command injection, but argument injection alone is sufficient: by directing the dump output to a web-served, PHP-executing path such as /app/public/index.php, the attacker writes code that the web server later executes. Authentication is required (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8), publicly available exploit code exists, and success depends on the chosen output path being both web-accessible and interpretable as code; no evidence of confirmed active exploitation was provided.
Argument injection in the AI translation feature of SumatraPDF 3.6.1 and earlier allows text placed in a document selection or clipboard to be interpreted as command-line flags when an agentic CLI backend (Grok, Claude Code, or Codex) is configured as the translation provider. Because the vulnerable code builds the child process command line with quote-only escaping, attacker-controlled text can smuggle in flags that alter the model, working directory, approval mode, or sandbox settings used by the launched CLI. Exploitation is local and requires the user to actively invoke the translate/AI-chat action on the crafted text, and only affects installations where one of those agentic CLI backends is installed and selected; no public exploit code was identified at time of analysis, and the issue is not in CISA KEV.
Authenticated argument injection in IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 (including the containerized editions) allows a remote attacker who already holds valid credentials to slip crafted parameters into command or process arguments and trigger unauthorized actions, with high impact to confidentiality, integrity, and availability (CVSS 8.8). Exploitation requires authenticated access (CVSS vector PR:L) and no user interaction (UI:N), so the exposed population is limited to existing platform users rather than anonymous internet traffic. No public exploit code has been identified at time of analysis and the issue is not confirmed as actively exploited (no CISA KEV listing), but a vendor patch is available and the affected systems are typically high-value identity infrastructure, making prompt remediation worthwhile.