Definition
A flaw in an AI tool or MCP server that builds a shell command from user or agent input without safe handling, letting a manipulated value execute arbitrary commands on the host machine. Because these tools run wherever agents live, a single injection can become full remote control of the server.
Why it matters
Command injection keeps recurring across the agent-tool ecosystem, meaning the tools agents trust are themselves a leading avenue for taking over the systems behind them.