CVE-2026-108543

The ag2ai ag2 library (versions up to 0.13.4 ) is vulnerable to a path traversal vulnerability within the UserProxyAgent component. The root cause is the improper handling of the filename argument in the os.path.join function, which allows for remote execution of the attack. While an exploit has ...

EUVD-2026-96864

A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument filename causes path traversal. The attack is possible to be carried out remotely. The exploit has been publicly disclos...