This release includes 1 security fix for security teams reviewing exposed deployments.
Published 2mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 1 known CVE
Topics
agentic-insight
agentic-search
chat-bot
code-generation
deep-research
memory
Summary
AI summaryFixed CVE-2026-2256 command injection vulnerability in Shell tool.
Breaking Changes
- Shell tool removed and migrated to sandbox environment
Security Fixes
- CVE-2026-2256: Shell tool regex denylist bypass leading to command injection
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ms-agent
MS-Agent: a lightweight framework to empower agentic execution of complex tasks
Related context
Related tools
Beta — feedback welcome: [email protected]