Evidence · DiggingBeagle record
AG2 SandboxShellTool allowlist and read-only restriction bypassed through unfiltered newline before sh -c
The upstream AG2 security advisory documents a shell-newline bypass of SandboxShellTool allowed and readonly filtering, the affected package families, and the 1.1.1 remediation. The advisory describes deterministic command execution, not a confirmed indirect-injection victim.
- Source role
- primary disclosure
Evidence record
The upstream AG2 security advisory documents a shell-newline bypass of SandboxShellTool allowed and readonly filtering, the affected package families, and the 1.1.1 remediation. The advisory describes deterministic command execution, not a confirmed indirect-injection victim.
Claim-level citations (1)
- supportsA newline bypassed AG2 shell allowlists and read-only mode: GHSA-2h4w-29cv-2cmv documents that CR/LF characters bypassed SandboxShellTool command filtering and allowed a second shell command despite configured allowlist or readonly mode.
Security advisory description, shell-parser contrast and patched release