OS command injection

Everything DataSafe Times has reported about OS command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Critical Command Injection Flaw in GPT-SoVITS 20250606v2pro Allows Remote Code Execution

Unauthenticated attackers can execute server-side commands via manipulated output folder paths in the GPT-SoVITS voice cloning tool, according to the NVD.

Oct 12, 2026

Vulnerabilities

CVSS 8.5 flaw CVE-2026-107322 lets hackers run OS commands via AWS plugin input injection

A CVSS 8.5 flaw in the databases-on-aws plugin allowed unauthenticated attackers to run OS commands via crafted inputs.

Oct 8, 2026