CVE-2026-123024 agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-123024

A vulnerability exists in agentscope-ai AgentScope up to version 2.0.11 affecting the Agent Service component. Specifically, the get_current_user_id function in src/agentscope/app/deps.py is susceptible to missing authentication when an attacker manipulates the X-User-ID argument. This flaw allow...

CVE-2026-123023 agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has be...

CVE-2026-123023

The agentscope-ai AgentScope software (up to version 2.0.8 ) contains a vulnerability in the Bash Tool component. Specifically, the check_permissions function in the file src/agentscope/tool/_builtin/_bash.py suffers from an incorrect authorization flaw. This issue could allow for remote exploita...

CVE-2026-123022

The agentscope-ai AgentScope software (up to version 2.0.11 ) is vulnerable to an os command injection in the MCP Workspace API component. The root cause is the improper handling of the command argument within the subprocess.Popen function located in src/agentscope/mcp/_config.py. This vulnerabil...

CVE-2026-123022 agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be...