Read the docs
TI-2024-07871 Aliases CVE-2024-8489GHSA-49rx-72gp-wfgj

CSRF due to overly permissive CORS headers in modelscope/agentscope

Priority HIGH 73CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-352.

Summary

A vulnerability in modelscope/agentscope, specifically in the AgentScope Studio backend server, allows for Cross-Site Request Forgery (CSRF) due to overly permissive CORS headers. This issue affects the latest commit on the main branch (21161fe). The vulnerability permits an attacker to access all backend endpoints, including the `api/file` endpoint, enabling the reading of arbitrary files on the target's local file system through CSRF.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00232 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
modelscopemodelscope/agentscopeup to latest—No fix listedCNA
  • modelscope/agentscope Vendormodelscope Affected up to latest Fixed in — No fix listed CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:modelscope:agentscope:*:*:*:*:*:*:*:*——modelscope
  • cpe:2.3:a:modelscope:agentscope:*:*:*:*:*:*:*:* Versions — — ·modelscope

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-8489
  2. 2026-10-03 Alias added: GHSA-49rx-72gp-wfgj

References

Other 1

  • TI-2024-32252 In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the… CVSS 3.1CRITICAL 9.8
  • TI-2024-07882 Remote Code Execution via Deserialization in modelscope/agentscope CVSS 3.0CRITICAL 9.8
  • TI-2024-07927 Path Traversal in modelscope/agentscope CVSS 3.1CRITICAL 9.1
  • TI-2024-07914 Path Traversal in modelscope/agentscope CVSS 3.0CRITICAL 9.1
  • TI-2024-07881 Arbitrary File Download in modelscope/agentscope CVSS 3.1HIGH 8.8
  • TI-2024-07869 CORS Vulnerability in modelscope/agentscope CVSS 3.1CRITICAL 9.8
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences