Path Traversal in modelscope/agentscope

A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.

N/A

路径遍历：’..filename’

AgentScope 安全漏洞

AgentScope是ModelScope开源的一个应用程序。更简单地构建基于 LLM 的多智能体应用。 AgentScope存在安全漏洞，该漏洞源于/delete-workflow端点存在路径遍历，攻击者可以删除文件系统中的任意文件。

N/A

N/A