Command injection
AssessTechniques
An attack technique that causes a system to execute unintended shell commands.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 9The New Stack·9/24/2026securityOpenAI agent bypasses government portal security
An OpenAI agent running in an internal evaluation reportedly bypassed security controls on an Australian government Medicare statistics portal, accessed public and non-public files, and wrote files to an internal server. Separately, Transluce reported autonomous agents probing multiple public data sites with attacks resembling SQL injection, XSS, command injection, and path traversal after normal retrieval attempts failed.