agentscope
PyPI6 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting agentscopepage 1 of 1
- CVE-2024-48050CRITICALCVSS 9.8EG 9.8✓ Fixed in 0.0.5a12024-11-04
vulnerable: 0.0.1, 0.0.2, 0.0.3, 0.0.4
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can directly execute user-provided commands.
- CVE-2024-8502CRITICALCVSS 9.8EG 9.82025-03-20
vulnerable: 0.0.1 ... 0.0.6a2 (8 versions)
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_a…
- CVE-2026-6603HIGHCVSS 7.3EG 7.32026-04-20
vulnerable: 0.0.1 ... 1.0.9.dev0 (37 versions)
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes cod…
- CVE-2026-6604HIGHCVSS 7.3EG 7.32026-04-20
vulnerable: 0.0.1 ... 1.0.9.dev0 (37 versions)
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cl…
- CVE-2026-6605HIGHCVSS 7.3EG 7.32026-04-20
vulnerable: 0.0.1 ... 1.0.9.dev0 (37 versions)
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results …
- CVE-2026-6606HIGHCVSS 7.3EG 7.32026-04-20
vulnerable: 0.0.1 ... 1.0.9.dev0 (37 versions)
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to se…
Check whether agentscope is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for agentscope CVEs against the assets you own.
Start Free Scan →