Agentscope-ai vulnerabilities
We track 4 vulnerabilities in Agentscope-ai products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Agentscope-ai vulnerabilities
- 7.3 High severity
AgentScope: Improper Authentication
A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentic
- 7.3 High severity
AgentScope: Improper Authorization
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of th
- 7.3 High severity
AgentScope: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os co
- 7.5 High severity
agentscope: Improper Limitation of a Pathname to a Restricted Directory
AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skill_p