agentscope
Build and run agents you can see, understand and trust.
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 52
- Cadence
- ~11 days
- Last 12 months
- 31
Reach
- Stars
- 31.6k
Details
- License
- Apache-2.0
- First release
- Feb 26, 2024
| Version | Released | |
|---|---|---|
2.0.8
patch
| ||
2.0.7.post1
pre
| ||
2.0.7
patch
| ||
2.0.6
patch
| ||
2.0.5
patch
| ||
2.0.4.post1
pre
| ||
2.0.4
patch
| ||
2.0.3
patch
| ||
2.0.2
patch
| ||
2.0.1
patch
| ||
2.0.0
major
| ||
1.0.21
patch
| ||
1.0.20
patch
| ||
1.0.19.post1
pre
| ||
1.0.19
patch
| ||
1.0.18
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.17
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.16
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.16.dev0
pre
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.15
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.14
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.13
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.12
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.11
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.10
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.9
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.9.dev0
pre
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.8
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.7
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.6
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.5
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.4
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.3
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.2
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.1
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
1.0.0
major
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.6
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.5
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.5.dev0
pre
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.4
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.3
patch
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.3.dev0
pre
4 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
0.1.1
patch
7 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev | ||
0.1.0
minor
8 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.6a2
pre
9 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.6a1
pre
9 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.5a1
pre
9 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.5
patch
9 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.4
patch
14 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8438
GHSA-f4hc-q562-cc5r
PYSEC-2025-80
Mar 20, 2025
AgentScope Path Traversal in /api/file
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References
Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8524
GHSA-6v28-q95m-93qr
PYSEC-2025-83
Mar 20, 2025
AgentScope directory traversal vulnerability in /read-examples
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References
Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8501
GHSA-p6h7-hfj2-vmcf
PYSEC-2025-82
Mar 20, 2025
AgentScope arbitrary file download vulnerability in rpc_agent_client
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's host by exploiting the download_file method. This can lead to unauthorized access to sensitive information, including configuration files, credentials, and potentially system files, which may facilitate further exploitation such as privilege escalation or lateral movement within the network. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8487
GHSA-75v5-6885-59f9
PYSEC-2025-81
Mar 20, 2025
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
7.4
/ 10
High
Network
Low
None
Required
Changed
High
None
None
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8550
PYSEC-2025-84
Feb 10, 2025
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outside the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
Updated May 21, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev | ||
0.0.3
patch
14 CVEs
CVE-2026-6606
PYSEC-2026-2332
GHSA-crx8-wpv6-jrj2
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function _process_audio_block of the file src/agentscope/agent/_agent_base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6604
PYSEC-2026-2329
GHSA-659x-hm75-hpv7
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6603
PYSEC-2026-2331
GHSA-cr24-fv3h-8cjm
Jul 13, 2026
AgentScope Vulnerable to Remote Code Injection
Medium
Network
Low
None
None
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-6605
PYSEC-2026-2330
GHSA-8ggf-r3vm-p3jc
Jul 13, 2026
AgentScope vulnerable to Server-Side Request Forgery
Medium
Network
Low
None
None
A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function _get_bytes_from_web_url of the file src/agentscope/_utils/_common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
0.1.3
0.1.3.dev0
+ 25 more Show less
0.1.4
0.1.5
0.1.5.dev0
0.1.6
1.0.0
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.16.dev0
1.0.17
1.0.18
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.0.9.dev0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2024-8556
PYSEC-2026-1076
GHSA-6mf6-7j75-2m6f
Jul 07, 2026
AgentScope stored cross-site scripting (XSS) vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 07, 2026 · Source: OSV.dev
CVE-2024-8551
PYSEC-2026-255
GHSA-j9rw-qm5f-r8xm
Jun 29, 2026
AgentScope path traversal vulnerability in save-workflow
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8502
PYSEC-2026-253
GHSA-9w5h-67gf-xvv8
Jun 29, 2026
AgentScope Deserialization Vulnerability
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
References Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8537
PYSEC-2026-254
GHSA-c4cc-w454-4634
Jun 29, 2026
AgentScope path traversal vulnerability
9.1
/ 10
Critical
Network
Low
None
None
Unchanged
None
High
High
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
0.1.1
References
Updated Jul 01, 2026 · Source: OSV.dev
CVE-2024-8438
GHSA-f4hc-q562-cc5r
PYSEC-2025-80
Mar 20, 2025
AgentScope Path Traversal in /api/file
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References
Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8524
GHSA-6v28-q95m-93qr
PYSEC-2025-83
Mar 20, 2025
AgentScope directory traversal vulnerability in /read-examples
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this vulnerability to read any local JSON file by sending a crafted POST request to the /read-examples endpoint. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References
Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8501
GHSA-p6h7-hfj2-vmcf
PYSEC-2025-82
Mar 20, 2025
AgentScope arbitrary file download vulnerability in rpc_agent_client
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4. This vulnerability allows any user to download any file from the rpc_agent's host by exploiting the download_file method. This can lead to unauthorized access to sensitive information, including configuration files, credentials, and potentially system files, which may facilitate further exploitation such as privilege escalation or lateral movement within the network. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8487
GHSA-75v5-6885-59f9
PYSEC-2025-81
Mar 20, 2025
AgentScope Cross-Origin Resource Sharing (CORS) vulnerability
7.4
/ 10
High
Network
Low
None
Required
Changed
High
None
None
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can lead to unauthorized data access, information disclosure, and potential further exploitation, thereby compromising the integrity and confidentiality of the system. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
References Updated Jun 05, 2026 · Source: OSV.dev
CVE-2024-8550
PYSEC-2025-84
Feb 10, 2025
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outside the intended directory. Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
Updated May 21, 2026 · Source: OSV.dev
CVE-2024-48050
GHSA-6p55-qr3j-mpgq
PYSEC-2024-262
Nov 05, 2024
AgentScope uses `eval`
High
Network
Low
None
None
In agentscope <=v0.0.4, the file Affected versions
0.0.1
0.0.2
0.0.3
0.0.4
0.0.5
0.0.5a1
0.0.6a1
0.0.6a2
0.1.0
References
Updated May 20, 2026 · Source: OSV.dev |