Skip to content
OpenAdvisories

Vendor

modelscope

18 known vulnerabilities.

Products

modelscope/agentscope 10 agentscope 4 ms-swift 2 ms-agent 1 modelscope 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-8537

    Path Traversal in modelscope/agentscope

    A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to…

    modelscope modelscope/agentscope agentscope PyPI
  • Critical 9.1
    CVE-2024-8551

    Path Traversal in modelscope/agentscope

    A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading …

    modelscope modelscope/agentscope agentscope PyPI
  • Critical 9.8
    CVE-2024-8502

    Remote Code Execution via Deserialization in modelscope/agentscope

    A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where s…

    modelscope modelscope/agentscope agentscope PyPI