Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-16 · source-backed
Unsanitized shell command execution in Microsoft's Agent Framework — days from GA — allows prompt injection to escalate to arbitrary OS command execution. The flaw passes user-controlled or model-generated inputs directly through the shell without sanitization. If you're migrating from AutoGen or Semantic Kernel, audit every shell tool invocation before deployment. CyberPress
Each link below shares sources, entities, or timing with this story.
Microsoft released Agent Framework / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Agent Framework); both cover Agent Framework, AutoGen, Microsoft, Semantic Kernel; overlapping topics (agent, autogen).
Microsoft criticizes Semantic Kernel / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft criticizes Semantic Kernel); both cover CVE, Microsoft, Semantic Kernel; overlapping topics (agent, allow, arbitrary, framework, microsoft).
Microsoft supports MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft supports MCP); both cover Agent Framework, CVE, Microsoft; overlapping topics (agent, audit, framework, microsoft).
Microsoft criticizes Semantic Kernel / Shared entities / Shared topic
Linked by a graph relationship (Microsoft criticizes Semantic Kernel); both cover AutoGen, Microsoft, Semantic Kernel; overlapping topics (agent, autogen, framework, microsoft).
Microsoft supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, Microsoft; overlapping topics (agent, injection, microsoft).
Microsoft released Agent Framework / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Agent Framework); both cover Agent Framework, Microsoft; overlapping topics (agent, command, framework, microsoft).
Linked by a graph relationship (Microsoft released Agent Framework); both cover Agent Framework, Microsoft; overlapping topics (agent, days, framework, microsoft).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, Microsoft; overlapping topics (agent, command, execution, microsoft).