Improper Neutralization of Special Elements used in an OS Command. Occurs when user-controlled input is included in a shell command without safe argument separation.
CWE-78 (OS Command Injection) is classified as critical severity and falls under the OWASP Top 10 category A03:2021.
The official CWE entry is maintained by MITRE at cwe.mitre.org/data/definitions/78.html.
Orbis AppSec automatically detects and fixes OS Command Injection vulnerabilities in your code with AI-powered static analysis.