Common Weakness Enumeration

    CWE Definition / CWE-88

    CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

    CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

    CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

    CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')