Description
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. Upgrading to version 2.0.9 mitigates this issue. Patch name: 6b43b13a46401e86abd3defeed9a8bfe5b37bc6d. It is recommended to upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| agentscope-ai | AgentScope | 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8 | 2.0.9 |
References
- VDB-431396 | agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization vdb-entry technical-description
- VDB-431396 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-123023 | CVE Analysis and Report third-party-advisory
- Submit #1033131 | agentscope-ai AgentScope 2.0.4 CWE-863 Incorrect Authorization third-party-advisory
- https://github.com/agentscope-ai/agentscope/issues/3313 issue-tracking
- https://github.com/agentscope-ai/agentscope/pull/2629 issue-tracking patch
- https://github.com/ybyu-ieu/agent-security-advisories/blob/main/agentscope/agentscope-bash-tool-tee-misclassification-arbitrary-file-write.md exploit
- https://github.com/agentscope-ai/agentscope/commit/6b43b13a46401e86abd3defeed9a8bfe5b37bc6d patch
- https://github.com/agentscope-ai/agentscope/releases/tag/v2.0.9 patch
- https://github.com/agentscope-ai/agentscope/ product