CVE-2026-2256

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 2, 2026

Last Seen

March 3, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Command Injection Vulnerability in MS-Agent Framework Discovered31.9

A command injection vulnerability was identified in the MS-Agent framework, allowing attackers to exploit improper input sanitization through its shell tool. This flaw can lead to arbitrary command execution on systems where the framework is deployed. As of March 2, 2026, no patch or vendor statemen...