Skip to content
OpenAdvisories

Vendor

modelscope

18 known vulnerabilities.

Products

modelscope/agentscope 10 agentscope 4 ms-swift 2 ms-agent 1 modelscope 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-2256 Public exploit

    Command injection vulnerability in ModelScope's ms-agent

    A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

    modelscope ms-agent ms-agent PyPI
  • Medium 6.1
    CVE-2024-8556

    Stored XSS in modelscope/agentscope

    A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is a…

    modelscope modelscope/agentscope agentscope PyPI