Vendors / agentscope-ai Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now agentscope-ai records in CISA KEV No agentscope-ai vulnerabilities are listed in CISA KEV.
Priority HIGH 77
AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00548 · Published 2026-09-04 · No fix listed CWE-22
Priority MEDIUM 42
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01638 · Published 2026-11-05 · No fix listed CWE-77
Priority LOW 38
A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00679 · Published 2026-11-05 · No fix listed CWE-287
Priority LOW 37
A flaw has been found in agentscope-ai AgentScope up to 2.0.8.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00594 · Published 2026-11-05 · Fixed in 2.0.9 CWE-285
Open these records in search → All records by CVSS severity
0 1 3 0 0
