Skip to content
OpenAdvisories

Vendor

modelscope

18 known vulnerabilities.

Products

modelscope/agentscope 10 agentscope 4 ms-swift 2 ms-agent 1 modelscope 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-2256 Public exploit

    Command injection vulnerability in ModelScope's ms-agent

    A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

    modelscope ms-agent ms-agent PyPI