AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

agentscopeGHSA-j9rw-qm5f-r8xm

AgentScope path traversal vulnerability in save-workflow

agentscope

CVE-2024-8551 · Published Mar 20, 2025 · updated Oct 26, 2026

Critical9.1
No fix yet
GitHub advisory

A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords.

Affected versions

PackageAffectedFixed in
agentscope
PyPI
<= 0.1.1No fix yet
Details and references

More agentscope advisories

All agentscope