Vendor
The SandboxShellTool in AG2 and AutoGen fails to filter newline characters, allowing attackers to bypass command allowlists and read-only restrictions to execute arbitrary shell commands via CVE-2026-113663.