CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

PT-2026-103601

Name of the Vulnerable Software and Affected Versions modelscope Agentscope versions 1.0.0 through 1.0.8 Description A path traversal issue exists in the insert text file function. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the intende...

EUVD-2026-90427

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51570: Undefined Security Weakness

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

The modelscope Agentscope software, specifically versions v1.0.18-v1.0.0 , is vulnerable to a Path Traversal flaw within the write_text_file function. This vulnerability allows for unauthorized access or manipulation of files outside the intended directory. Exploitation details were observed in a...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

python313-modelscope-hub-0.4.2-1.1 on GA media (moderate)

python313-modelscope-hub-0.4.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11746-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

python313-modelscope-1.40.0-1.1 on GA media (moderate)

python313-modelscope-1.40.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11736-1 Rating: moderate Cross-References: CVE-2026-84202 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:11746-1 python313-modelscope-hub-0.4.2-1.1 on GA media

These are all security issues fixed in the python313-modelscope-hub-0.4.2-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89714

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11736-1 python313-modelscope-1.40.0-1.1 on GA media

These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-84202

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

CVE-2026-84202

A flaw was found in ModelScope. This vulnerability arises from the use of PyYAML's unsafe yaml.Loader when parsing model configuration files. A remote attacker can exploit this by crafting malicious model repositories containing poisoned configuration files. When these files are loaded by a user,...

CVE-2026-84202

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

EUVD-2026-69289

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...

abstract-hugpy-dev (>=0.1.32, <=0.1.35), abstract-ocr (>=0.0.1.69, <=0.0.1.70) +414 more potentially affected by CVE-2026-84202 via modelscope (>=1.1.1, <=1.40.1)

modelscope PYPI version =1.1.1, =0.1.32, =0.0.1.69, =0.0.29, =1.11.4, =20260210.0.0, =0.1.0, =0.4.0, =2.0.0, =0.5.4, =1.0.0, =1.0.1 - any4any 0.1.1 and more Source cves: CVE-2026-84202 Source advisory: SNYK:PYTHON-MODELSCOPE-19497923...

CVE-2026-84202 ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...