ag2ai ag2

• CVE-2026-113663 High 8.8 AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution 0.3%
• CVE-2026-108543 Medium 6.3 ag2ai ag2 UserProxyAgent os.path.join path traversal 0.3%