CVE-2026-113663

The AG2 open-source AgentOS contains a vulnerability in SandboxShellTool configurations (versions 0.13.2 until 1.1.1; autogen 0.13.2 to 0.14.1) when using allowed=[...] or readonly=True. The ShellAdapter._filter and contains_shell_operator functions in ag2/tools/sandbox/filter.py and ag2/tools/sa...