@infosecbriefly.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

Information Security Briefly

infosecbriefly.bsky.social

did:plc:ksubnc3tnvhynkmszhw5zsyh

CVE-2026-2256 in ModelScope MS-Agent framework allows arbitrary OS command execution through inadequate input sanitization in the Shell tool using regex-based blacklist filtering. https://briefly.co/anchor/Information_security/story/vulnerability-in-ms-agent-ai-framework-can-allow-full-system-compromise?hl=1&f=bluesky_porchetta&utm_source=Bluesky&utm_medium=auto&utm_content=unhighlighted&utm_campaign=Information_security

2026-03-03T10:54:34.856Z