CVE-2026-113663

AG2 is an open-source AgentOS. From 0.13.2 until ag2 1.1.1, and from autogen 0.13.2 to 0.14.1, SandboxShellTool configurations using allowed=... or readonly=True rely on ShellAdapter.filter and containsshelloperator in ag2/tools/sandbox/filter.py and ag2/tools/sandbox/adapter/shell.py to validate...