AgentScope vulnerabilities
CVEs whose affected-version data names the AgentScope package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2026-123024High· 7.3agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication
A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID lea…
CVE-2026-123022High· 7.3agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument c…
CVE-2026-123023High· 7.3agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Re…
CVE-2026-6606High· 7.3AgentScope vulnerable to Server-Side Request Forgery
AgentScope vulnerable to Server-Side Request Forgery
CVE-2026-6603High· 7.3AgentScope Vulnerable to Remote Code Injection
AgentScope Vulnerable to Remote Code Injection
CVE-2026-6605High· 7.3AgentScope vulnerable to Server-Side Request Forgery
AgentScope vulnerable to Server-Side Request Forgery
CVE-2026-6604High· 7.3AgentScope vulnerable to Server-Side Request Forgery
AgentScope vulnerable to Server-Side Request Forgery
CVE-2024-8537Critical· 9.1AgentScope path traversal vulnerability
AgentScope path traversal vulnerability
CVE-2024-8502Critical· 9.8AgentScope Deserialization Vulnerability
AgentScope Deserialization Vulnerability
CVE-2024-8551Critical· 9.1AgentScope path traversal vulnerability in save-workflow
AgentScope path traversal vulnerability in save-workflow
CVE-2024-8556Medium· 6.1AgentScope stored cross-site scripting (XSS) vulnerability
AgentScope stored cross-site scripting (XSS) vulnerability