Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: agentscope-ai Clear all filters
TI-2026-85403 CVE-2026-123022 · GHSA-m997-8g56-6phf

AgentScope MCP Workspace API OS command injection

Priority MEDIUM 42

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01638 Published 2026-11-05 No fix listed CWE-77
TI-2026-58796 CVE-2026-85685 · GHSA-gpf9-4466-gc5g

AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

Priority HIGH 77

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00548 Published 2026-09-04 No fix listed CWE-22