CVE-2026-51856

The agentscope library (versions 1.0.18 , 1.0.19 , and 1.0.19 ) is vulnerable to arbitrary code execution. When a RealtimeAgent session exposes the execute_python_code tool, a remote WebSocket user can prompt the agent to execute Python code within the service environment. The root cause is locat...

EUVD-2026-90424

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes executepythoncode as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the validated path, RealtimeAgent.acting forwards the...