Ag2ai Ag2 vulnerabilities

• ag2ai ag2, autogen +1 more AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution CVE-2026-113663 8.8 HighNovember 5, 2026
• ag2ai ag2 ag2ai ag2 UserProxyAgent os.path.join path traversal CVE-2026-108543 5.3 MediumOctober 11, 2026