agentscopeGHSA-9w5h-67gf-xvv8
AgentScope Deserialization Vulnerability
Critical9.8CVE-2024-8502 · Published Mar 20, 2025 · updated Jun 29, 2026
A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create_agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| agentscope PyPI | <= 0.0.6a3 | No fix yet |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- CVE-2024-8502, PYSEC-2026-253
More agentscope advisories
All agentscope| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 202025 | AgentScope stored cross-site scripting (XSS) vulnerability Medium6.1Mar 20, 2025 | Medium6.1 | No fix yet |
| Mar 202025 | AgentScope directory traversal vulnerability in /read-examplesHigh7.5Mar 20, 2025 | High7.5 | No fix yet |
| Mar 202025 | AgentScope Cross-Origin Resource Sharing (CORS) vulnerabilityHigh7.4Mar 20, 2025 | High7.4 | No fix yet |
| Mar 202025 | AgentScope path traversal vulnerabilityCritical9.1Mar 20, 2025 | Critical9.1 | No fix yet |
| Mar 202025 | AgentScope Path Traversal in /api/fileHigh7.5Mar 20, 2025 | High7.5 | No fix yet |
| Mar 202025 | AgentScope path traversal vulnerability in save-workflowCritical9.1Mar 20, 2025 | Critical9.1 | No fix yet |