What’s Vulnerable › Products

modelscope/agentscope vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your modelscope/agentscope version is affected

Latest modelscope/agentscope vulnerabilities

• CVE-2026-6606 — modelscope agentscope _agent_base.py _process_audio_block server-side request forgery (CVSS 7.3)
• CVE-2026-6605 — modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery (CVSS 7.3)
• CVE-2026-6604 — modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery (CVSS 7.3)
• CVE-2026-6603 — modelscope agentscope _python.py execute_shell_command code injection (CVSS 7.3)
• CVE-2024-8556 — Stored XSS in modelscope/agentscope (CVSS 6.1)
• CVE-2024-8551 — Path Traversal in modelscope/agentscope (CVSS 9.1)
• CVE-2024-8537 — Path Traversal in modelscope/agentscope (CVSS 9.1)
• CVE-2024-8524 — Directory Traversal in modelscope/agentscope (CVSS 7.5)
• CVE-2024-8502 — Remote Code Execution via Deserialization in modelscope/agentscope (CVSS 9.8)
• CVE-2024-8501 — Arbitrary File Download in modelscope/agentscope (CVSS 8.8)
• CVE-2024-8489 — CSRF due to overly permissive CORS headers in modelscope/agentscope (CVSS 8.8)
• CVE-2024-8487 — CORS Vulnerability in modelscope/agentscope (CVSS 9.8)
• CVE-2024-8438 — Path Traversal in modelscope/agentscope (CVSS 7.5)
• CVE-2024-8550 — Local File Inclusion (LFI) in modelscope/agentscope (CVSS 7.5)
• CVE-2024-48050 — (CVSS 9.8)