Priority HIGH 82
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00811 · Published 2024-11-04 · No fix listed CWE-94
Priority HIGH 82
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01844 · Published 2025-03-20 · No fix listed CWE-502
Priority HIGH 78
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01022 · Published 2025-03-20 · No fix listed CWE-23
Priority HIGH 78
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0104 · Published 2025-03-20 · No fix listed CWE-29
Priority HIGH 77
An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version v0.0.4.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01022 · Published 2025-03-20 · No fix listed CWE-36
Priority HIGH 75
A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00295 · Published 2025-03-20 · No fix listed CWE-346
Priority HIGH 73
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags.
CVSS 4.0HIGH 8.7· Network · No auth · User interaction · EPSS 0.00682 · Published 2026-09-01 · Fixed CWE-502
Priority HIGH 73
A vulnerability in modelscope/agentscope, specifically in the AgentScope Studio backend server, allows for Cross-Site Request Forgery (CSRF) due to overly permissive CORS headers.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00232 · Published 2025-03-20 · No fix listed CWE-352
Priority HIGH 72
A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0052 · Published 2025-02-10 · No fix listed CWE-497
Priority HIGH 72
A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01186 · Published 2025-03-20 · No fix listed CWE-22
Priority HIGH 72
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.00772 · Published 2025-03-20 · No fix listed CWE-22
Priority HIGH 70
A weakness has been identified in modelscope agentscope up to 1.0.18.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00284 · Published 2026-04-20 · No fix listed CWE-918
Priority HIGH 70
A security flaw has been discovered in modelscope agentscope up to 1.0.18.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00326 · Published 2026-04-20 · No fix listed CWE-918
Priority HIGH 70
A vulnerability was identified in modelscope agentscope up to 1.0.18.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00284 · Published 2026-04-20 · No fix listed CWE-918
Priority HIGH 70
A vulnerability was determined in modelscope agentscope up to 1.0.18.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00311 · Published 2026-04-20 · No fix listed CWE-74
Priority HIGH 68
A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02055 · Published 2026-03-02 · Fix deferred CWE-77
Priority MEDIUM 60
A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00425 · Published 2025-03-20 · No fix listed CWE-79
Priority MEDIUM 44
ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00483 · Published 2026-09-04 · No fix listed CWE-918
Priority MEDIUM 44
A security vulnerability has been detected in modelscope ms-swift up to 4.2.0.
CVSS 4.0LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00075 · Published 2026-06-04 · No fix listed CWE-327
THREATIST.IORead the docs