CVE-2026-51851

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savetextfile. The savetextfile method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...

EUVD-2026-113288

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savetextfile. The savetextfile method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...

CVE-2026-51851

The software modelscope agent-zero versions 1.7, 1.8, 1.9, and 1.10 is vulnerable to a Directory Traversal vulnerability in the python/helpers/file_browser.py:FileBrowser.save_text_file method. The root cause is that the method accepts user-controlled file paths without performing any normalizati...

ModelScope MS-Agent 1.5.1 < 1.6.0 Command Injection (CVE-2026-2256)

The version of ModelScope MS-Agent installed on the remote host is 1.5.1 or later but prior to 1.6.0. It is, therefore, affected by a command injection vulnerability. The Shell tool runs commands on the host through a shell, guarded only by a regex denylist that can be bypassed, allowing an...

CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

EUVD-2026-90427

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

PT-2026-103601

Name of the Vulnerable Software and Affected Versions modelscope Agentscope versions 1.0.0 through 1.0.8 Description A path traversal issue exists in the insert text file function. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the intende...

CVE-2026-51570: Improper Limitation of a Pathname to a Restricted Directory

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51568

The modelscope Agentscope software, specifically versions v1.0.18-v1.0.0 , is vulnerable to a Path Traversal flaw within the write_text_file function. This vulnerability allows for unauthorized access or manipulation of files outside the intended directory. Exploitation details were observed in a...

python313-modelscope-hub-0.4.2-1.1 on GA media (moderate)

python313-modelscope-hub-0.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11746-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-modelscope-1.40.0-1.1 on GA media (moderate)

python313-modelscope-1.40.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11736-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:11746-1 python313-modelscope-hub-0.4.2-1.1 on GA media

These are all security issues fixed in the python313-modelscope-hub-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11736-1 python313-modelscope-1.40.0-1.1 on GA media

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89714

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-84202

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...