high2026-11-10 CVE-2026-113663-AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and readonly=True, enabling arbitrary command execution GHSA-2h4w-29cv-2cmv