CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51922: Improper Control of Generation of Code

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51922

The agentscope v1.0.20 software is vulnerable to a code injection flaw in the execute_shell_command function located at src/agentscope/tool/_coding/_shell.py. An attacker can trigger the execution of attacker-controlled code or commands depending on the exposed entry point. While technical exploi...

PT-2026-104374

Name of the Vulnerable Software and Affected Versions AgentScope version 1.0.20 Description Code injection exists in the execute shell command function located in src/agentscope/tool/ coding/ shell.py. Depending on the exposed entry, an attacker can trigger the execution of attacker-controlled co...

CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

EUVD-2026-91754

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51856

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes executepythoncode as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the validated path, RealtimeAgent.acting forwards the...

CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

EUVD-2026-90428

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

PT-2026-103604

Name of the Vulnerable Software and Affected Versions agentscope versions 1.0.18 through 1.0.19 Description A remote WebSocket user can prompt the agent to execute arbitrary Python code within the service environment. This occurs when the RealtimeAgent session exposes the execute python code tool...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

EUVD-2026-90427

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

EUVD-2026-90424

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes executepythoncode as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the validated path, RealtimeAgent.acting forwards the...

CVE-2026-51568: Improper Limitation of a Pathname to a Restricted Directory

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

PT-2026-103601

Name of the Vulnerable Software and Affected Versions modelscope Agentscope versions 1.0.0 through 1.0.8 Description A path traversal issue exists in the insert text file function. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the intende...

CVE-2026-51856: Improper Control of Generation of Code

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes executepythoncode as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the validated path, RealtimeAgent.acting forwards the...

PT-2026-103600

Name of the Vulnerable Software and Affected Versions modelscope Agentscope versions 1.0.0 through 1.0.18 Description A path traversal issue exists in the write text file function. Path traversal is a flaw that allows an attacker to access or manipulate files and directories outside the intended...