CVE-2024-8551

CVE-2024-8551 : A path traversal vulnerability affects modelscope/agentscope in the save-workflow and load-workflow functionality, present in versions prior to the fix. An attacker can read and write arbitrary JSON files on the filesystem, potentially exposing or modifying sensitive data (config ...

CVE-2024-8487

AgentScope (modelscope/agentscope) v0.0.4 has a CORS misconfiguration that does not restrict access to trusted origins, enabling requests from any external domain. This can lead to unauthorized data access and information disclosure. Some sources note PoC availability and state there is no fixed ...

CVE-2024-48050

CVE-2024-48050 affects AgentScope

CVE-2024-8537

CVE-2024-8537 describes a path traversal vulnerability in modelscope/agentscope affecting the /delete-workflow endpoint, enabling an attacker to delete arbitrary files due to improper input validation. The issue is reported across multiple feeds (Veracode, Snyk, GHSA/OSV/CVE listings) with PoC-li...