modelscope agentscope vulnerabilities

Latest modelscope agentscope CVEs

Newest publication first

1. CVE-2026-6606 modelscope agentscope _agent_base.py _process_audio_block server-side request forgery

   Published 2026-04-20

   Medium·CVSS 6.9

   A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible...

2. CVE-2026-6605 modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery

   Published 2026-04-20

   Medium·CVSS 6.9

   A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is pos...

3. CVE-2026-6604 modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery

   Published 2026-04-20

   Medium·CVSS 6.9 EPSS 0.28%

   A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation...

4. CVE-2026-6603 modelscope agentscope _python.py execute_shell_command code injection

   Published 2026-04-20

   Medium·CVSS 6.9

   A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be...

5. CVE-2024-8487 CORS Vulnerability in modelscope/agentscope

   Published 2025-03-20

   Critical·CVSS 9.8

   A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead...

6. CVE-2024-8556 Stored XSS in modelscope/agentscope

   Published 2025-03-20

   Medium·CVSS 6.1

   A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered...

7. CVE-2024-8524 Directory Traversal in modelscope/agentscope

   Published 2025-03-20

   High·CVSS 7.5

   A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint.

8. CVE-2024-8537 Path Traversal in modelscope/agentscope

   Published 2025-03-20

   Critical·CVSS 9.1

   A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input valid...

9. CVE-2024-8551 Path Traversal in modelscope/agentscope

   Published 2025-03-20

   Critical·CVSS 9.1

   A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or mo...

10. CVE-2024-8438 Path Traversal in modelscope/agentscope

    Published 2025-03-20

    High·CVSS 7.5

    A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint /api/file does not properly sanitize the path parameter, allowing an attacker to read arbitrary files on the server.

11. CVE-2024-8501 Arbitrary File Download in modelscope/agentscope

    Published 2025-03-20

    High·CVSS 8.8

    An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's host by exploiting the download_file method. This can lead to unauthorized acces...

12. CVE-2024-8550 Local File Inclusion (LFI) in modelscope/agentscope

    Published 2025-02-10

    High·CVSS 7.5

    A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parame...

13. CVE-2024-48050 AgentScope uses `eval`

    Published 2024-11-04

    Critical·CVSS 9.8

    In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can directly execute user-provided commands.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.