Advisories · Technology
AgentScope.
Every CVE that names AgentScope among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
agentscope-ai AgentScope Agent Service deps.py get_current_user_id missing authentication
- AgentScope
- Authentication bypass
- CVSS 6.9 Medium
agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization
- AgentScope
- Broken access control
- CVSS 6.9 Medium
agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection
- AgentScope
- Command injection
- CVSS 8.7 High
AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
- agentscope
- Path traversal