agentscope-ai has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was November 2026 with 3. The median CVSS is 7.3 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-123024High· 7.3agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication40CVE-2026-123023High· 7.3agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization40CVE-2026-123022High· 7.3agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection40
agentscope-ai vulnerabilities
CVEs affecting agentscope-ai, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-123024High· 7.3agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication
A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID lea…
CVE-2026-123022High· 7.3agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument c…
CVE-2026-123023High· 7.3agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Re…