CVE-2026-123022

A flaw was found in AgentScope. A remote attacker can exploit this command injection vulnerability by submitting manipulated command parameters to the Model Context Protocol MCP Workspace API. Because input is passed directly to system execution functions without adequate validation, an attacker...

CVE-2026-123022

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...

CVE-2026-123024

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123023

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

EUVD-2026-117463

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024 agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024 agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024

A vulnerability exists in agentscope-ai AgentScope up to version 2.0.11 affecting the Agent Service component. Specifically, the get_current_user_id function in src/agentscope/app/deps.py is susceptible to missing authentication when an attacker manipulates the X-User-ID argument. This flaw allow...

CVE-2026-123023 agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023 agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

EUVD-2026-117442

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023

The agentscope-ai AgentScope software (up to version 2.0.8 ) contains a vulnerability in the Bash Tool component. Specifically, the check_permissions function in the file src/agentscope/tool/_builtin/_bash.py suffers from an incorrect authorization flaw. This issue could allow for remote exploita...

EUVD-2026-117439

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...

CVE-2026-123022

The agentscope-ai AgentScope software (up to version 2.0.11 ) is vulnerable to an os command injection in the MCP Workspace API component. The root cause is the improper handling of the command argument within the subprocess.Popen function located in src/agentscope/mcp/_config.py. This vulnerabil...

CVE-2026-123022 agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...

CVE-2026-123022 agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...

CVE-2026-123022 agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...

AgentScope-AI command injection vulnerability

AgentScope-AI agentscope versions 2.0.11 and earlier contain a command injection vulnerability. This vulnerability stems from improper handling of the “command” parameter in the subprocess.Popen function within the file src/agentscope/mcp/config.py, potentially leading to os command injection...

PT-2026-137455

Name of the Vulnerable Software and Affected Versions AgentScope versions 2.0.0 through 2.0.11 Description An OS command injection flaw exists in the MCP Workspace API. The issue occurs when the server spawns a command as a local process upon saving a stdio MCP config. Specifically, the...

AgentScope-AI agentscope authorization issue vulnerability

AgentScope-AI agentscope versions 2.0.8 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper authorization in the checkpermissions function within the Bash Tool component, located at src/agentscope/tool/builtin/bash.py. It may allow remote attackers to...