Threats tagged 'ghsa-2h4w-29cv-2cmv'

SandboxShellTool in ag2 versions >=0.13.2 and <1.1.1 allows bypassing command restrictions by embedding newline characters in commands. The tool's filter does not recognize newlines as shell operators, enabling execution of arbitrary shell commands via 'sh -c' despite configured allowlists or readonly restrictions. This leads to full host command execution, not sandboxed, posing a high-severity risk. The issue is fixed in version 1.1.1.