CVE-2026-100368

CliInvoke is a .NET library for invoking command-line programs, and its `CliInvoke.Specializations` packages provide specialized wrappers for shells such as PowerShell and Windows Command Prompt. `CliInvoke.Specializations` versions 2.2.0 through 2.8.4, 2.9.0 through 2.9.3, 2.10.0 through 2.10.4, 3.0.0-alpha.1 through 3.0.0-alpha.4, and 3.0.0-alpha.8 through 3.0.0-alpha.10, as well as `AlastairLundy.CliInvoke.Specializations` versions 1.0.0-rc.1 through 1.6.1.1, contain an OS command injection vulnerability in their PowerShell and Cmd wrappers. The wrappers pass a caller-controlled target and arguments to `pwsh -Command` or `cmd /c` using a single `ProcessStartInfo.Arguments` string, allowing a double quote in untrusted input to break operating-system-level quoting and cause the shell to execute an additional command with the host process's privileges. The vulnerability is patched in `CliInvoke.Specializations` versions 2.8.5, 2.9.4, 2.10.5, and 3.0.0-beta.1, and in `AlastairLundy.CliInvoke.Specializations` version 2.0.2. No complete workaround is available; users unable to upgrade should reject or remove double quotes from target paths and arguments, additionally reject shell metacharacters in versions 2.2.0 through 2.9.2 and 3.0.0-alpha.1 through 3.0.0-alpha.4, or bypass the PowerShell and Cmd wrappers and invoke target processes directly when handling untrusted input.

• CWE-78

• https://github.com/alastairlundy/CliInvoke/security/advisories/GHSA-wrvw-254r-wpmv

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100310GNU libextractor before 1.16 loads plugins from an untrusted…7
• CVE-2026-10032The openUrl function in @a2ui/web_core passes an agent-contr…6.1
• CVE-2026-10033The EventON Action User plugin for WordPress is vulnerable t…7.3
• CVE-2026-10034The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…5.3
• CVE-2026-10035The Turnkey bbPress by WeaverTheme plugin for WordPress is v…6.6
• CVE-2026-10036SpeechBrain before 1.1.1 contains an arbitrary code executio…8.8
• CVE-2026-10037A sandbox escape vulnerability exists in the OpenJDK package…8.8
• CVE-2026-100372ClipBucket v5 before 5.5.3-#197 contains a path traversal vu…7.2
• CVE-2026-100373OpenMetadata through 2.0.2 contains a server-side request fo…4.1
• CVE-2026-10038The Charitable – Donation Plugin for WordPress – Fundraising…4.3
• CVE-2026-10039The Frontend Admin by DynamiApps plugin for WordPress is vul…4.9
• CVE-2026-1004The Essential Addons for Elementor plugin for WordPress is v…5.3