All 4 CVE vulnerabilities found in agentscope, with AI-generated Chinese analysis, references, and POCs.
Vendor: modelscope
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-6606 | modelscope agentscope _agent_base.py _process_audio_block server-side request forgery CWE-918 | 7.3 | High | 2026-04-20 |
| CVE-2026-6605 | modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery CWE-918 | 7.3 | High | 2026-04-20 |
| CVE-2026-6604 | modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery CWE-918 | 7.3 | High | 2026-04-20 |
| CVE-2026-6603 | modelscope agentscope _python.py execute_shell_command code injection CWE-94 | 7.3 | High | 2026-04-20 |
All 4 known CVE vulnerabilities affecting agentscope with full Chinese analysis, references, and POCs where available.