All rules →
Rules / Kotlin
SHIELD-KOTLIN-003

Command injection via Runtime.exec with variable

criticalKotlinCWE-78CVSS 9.8

What it detects

Runtime.getRuntime().exec invoked with an interpolated or concatenated variable allows OS command injection.

How to fix

Avoid shell execution with untrusted input; use a fixed argument array and validate inputs against an allowlist.

Scan your repo freeFull documentation
Back to all rules
SHIELD-KOTLIN-003: Command injection via Runtime.exec with variable — Zennoxa Shield