CVE-2026-113663

{
  "etk_id": "ETK-2026-3680",
  "cve_id": "CVE-2026-113663",
  "display_id": "CVE-2026-113663",
  "ghsa_id": "GHSA-2h4w-29cv-2cmv",
  "euvd_id": "EUVD-2026-117877",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Shell command injection in AG2 SandboxShellTool",
  "summary": "AG2 SandboxShellTool before version 1.1.1 and affected autogen versions can incorrectly validate shell commands when allowlist or read-only controls are enabled. An attacker able to influence an agent command may execute unintended commands. LocalEnvironment deployments can run those commands with the privileges assigned to the agent process.",
  "mitigation": "Upgrade ag2 to version 1.1.1 or later. Until upgraded, disable SandboxShellTool for attacker-influenced input and run agents in isolated, least-privileged environments.",
  "vendor": "ag2ai",
  "product": "ag2",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.13.2, < 1.1.1"
      ],
      "ecosystem": "pip",
      "fixed_versions": [
        "1.1.1"
      ],
      "package_name": "ag2",
      "purl": "pkg:pypi/ag2"
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.13.2, <= 0.14.1"
      ],
      "ecosystem": "pip",
      "fixed_versions": [],
      "package_name": "autogen",
      "purl": "pkg:pypi/autogen"
    }
  ],
  "cwes": [
    78
  ],
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 7.046989083333333,
  "t0_at": "2026-11-05T22:53:40.444000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-05T23:45:05.933726+00:00",
      "days": 0.035711686643518516,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T22:53:40.444000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-05T22:53:40.444000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T22:53:40.444000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113663"
    }
  }
}