CPE

Cpe:2.3:a:ag2:ag2::::::::

1 brief RSS

AG2: SandboxShellTool command injection (CVE-2026-113663)

The SandboxShellTool in AG2 and AutoGen fails to filter newline characters, allowing attackers to bypass command allowlists and read-only restrictions to execute arbitrary shell commands via CVE-2026-113663.

ag2 +1 command-injection vulnerability agent-security

1t 1c 2h ago

Cpe:2.3:a:ag2:ag2:*:*:*:*:*:*:*:*

AG2: SandboxShellTool command injection (CVE-2026-113663)

Cpe:2.3:a:ag2:ag2::::::::