Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-03-16 · source-backed
Unsanitized shell command execution in Microsoft's Agent Framework — days from GA — allows prompt injection to escalate to arbitrary OS command execution. The flaw passes user-controlled or model-generated inputs directly through the shell without sanitization. If you're migrating from AutoGen or Semantic Kernel, audit every shell tool invocation before deployment. CyberPress
Each link below shares sources, entities, or timing with this story.
Microsoft released AutoGen / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released AutoGen); both cover Agent Framework, AutoGen, Microsoft, Semantic Kernel; overlapping topics (agent, autogen).
Microsoft released AutoGen / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Microsoft released AutoGen); both cover CVE, Microsoft, Semantic Kernel; overlapping topics (agent, allow, arbitrary, framework, microsoft).
Agent Framework uses AutoGen / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Agent Framework uses AutoGen); both cover Agent Framework, CVE, Microsoft; overlapping topics (agent, audit, framework, microsoft).
Microsoft released AutoGen / Shared entities / Shared topic
Linked by a graph relationship (Microsoft released AutoGen); both cover AutoGen, Microsoft, Semantic Kernel; overlapping topics (agent, autogen, framework, microsoft).
Microsoft released AutoGen / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft released AutoGen); both cover CVE, Microsoft; overlapping topics (agent, injection, microsoft).
Microsoft released AutoGen / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft released AutoGen); both cover Agent Framework, Microsoft; overlapping topics (agent, command, framework, microsoft).
Linked by a graph relationship (Microsoft released AutoGen); both cover Agent Framework, Microsoft; overlapping topics (agent, days, framework, microsoft).
Linked by a graph relationship (Microsoft released AutoGen); both cover CVE, Microsoft; overlapping topics (agent, command, execution, microsoft).