CVE-2026-2256 Command injection vulnerability in ModelScope's ms-agent

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input...

CVE-2026-2256

ModelScope's MS-Agent (specifically version v1.5.2 and earlier, including v1.6.0rc1 ) is vulnerable to a command injection flaw in its Shell tool component. The root cause is the improper sanitization of user-influenced input, which is passed directly to a shell execution context at ms_agent/tool...

CVE-2026-2256 Command injection vulnerability in ModelScope's ms-agent

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input...

CVE-2026-2256: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input...

PT-2026-22697

Name of the Vulnerable Software and Affected Versions ModelScope ms-agent versions prior to v1.6.0rc1 Description A command injection issue exists in the ModelScope ms-agent framework, specifically within the Shell tool, due to improper input sanitization. The regular expression-based blacklist...

MS-Agent 安全漏洞

MS-Agent is an open-source personal assistant framework developed by ModelScope. Versions of MS-Agent prior to v1.6.0rc1 contained security vulnerabilities. These vulnerabilities stemmed from specially crafted prompt inputs that could lead to command injection, allowing execution of arbitrary...

EUVD-2025-6904

Malicious code in bioql PyPI...

EUVD-2025-6894

Malicious code in bioql PyPI...

EUVD-2025-6907

Malicious code in bioql PyPI...

EUVD-2025-6908

Malicious code in bioql PyPI...

EUVD-2025-6899

Malicious code in bioql PyPI...

EUVD-2025-5038

Malicious code in bioql PyPI...

EUVD-2025-6909

Malicious code in bioql PyPI...

EUVD-2025-6905

Malicious code in bioql PyPI...

Deserialization Of Untrusted Data

ms-swift is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe deserialization due to malicious pickle deserialization in adapter model files, allowing arbitrary command execution when loading specially crafted adapter models from ModelScope...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...

PT-2025-31646 · Modelscope · Ms-Swift

Name of the Vulnerable Software and Affected Versions: modelscope/ms-swift versions through 2.6.1 Description: The modelscope/ms-swift library is susceptible to arbitrary code execution through the deserialization of untrusted data. This occurs within the load model meta function of the...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...

CVE-2025-50472: Deserialization of Untrusted Data

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the "loadmodelmeta" function of the "ModelFileSystemCache" class. Attackers can execute arbitrary code and commands by crafting a malicious serialized ".mdl"...