Command Injection Vulnerability in MS-Agent Framework Discovered

Command Injection Vulnerability in MS-Agent Framework Discovered

First seen 3 Mar 2026, 11:09 UTC •Kb.CertFeeds.FeedburnerSecurityweekCyberpressCybersecuritynews+1 •78% similarity •31.9

Article Content

Browse articles
ThreatCluster

A command injection vulnerability was identified in the MS-Agent framework, allowing attackers to exploit improper input sanitization through its shell tool. This flaw can lead to arbitrary command execution on systems where the framework is deployed. As of March 2, 2026, no patch or vendor statement has been issued.

ThreatCluster AI

Timeline

2026-03-02
CVE-2026-2256 published
2026-03-02
Vulnerability reported in MS-Agent framework
2026-03-03
Article published detailing the vulnerability

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Junos OS Evolved MS-Agent AI Framework Data Breach Zero-day Exploit MS-Agent