CVE-2026-113663 - AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution
CVE ID :CVE-2026-113663 Published : Nov. 5, 2026, 11:16 p.m. | 1 hour, 52 minutes ago Description :AG2 is an open-source AgentOS. From 0.13.2 until ag2 1.1.1, and from autogen 0.13.2 to 0.14.1, SandboxShellTool configurations using allowed=[...] or readonly=True rely on ShellAdapter._filter...