Critical MS

Back Cyberpress

Critical MS

Cyberpress • March 3, 2026

Share: View original

Tracked as CVE-2026-2256 and assigned Vulnerability Note VU#431821, the issue stems from unsanitized shell command execution .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Command Injection Vulnerability in MS-Agent Framework Discovered A command injection vulnerability was identified in the MS-Agent framework, allowing attackers to exploit improper input sanitization through its shell tool. This flaw can lead to arbitrary command execution on systems where the framework is deployed. As of March 2, 2026, no patch or vendor statement has been issued. 7 sources 32

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter