Advisories Tools Stats Checklist Submit Get the email

LLM frameworks · AG2 (ag2ai)

AG2

Open-source multi-agent framework, formerly AutoGen, maintained by ag2ai.

1Advisories

0critical

1high

0medium

2026-11-10Latest

Timeline · advisories per quarter

12026 Q4

Named in sources

Reported for AG2

01. highAgent hijackingNew this weekCVE-2026-113663: AG2 SandboxShellTool allowlist and readonly mode bypassed with a newline, letting a steered agent run any shell commandIn AG2 0.13.2 up to 1.1.1, SandboxShellTool's restricted modes (allowed=[...] and readonly=True) block ;, &&, | and similar operators but not a newline, and the command then runs through sh -c. A prompt-injected agent can send 'cat file' followed by a newline and any other command. With the default LocalEnvironment that runs on the host. Upgrade ag2 to 1.1.1; the advisory lists no fixed release of the old autogen package name.