Log in Start free

Vulnerability · Published Nov 5, 2026 · Assigned by VulDB

CVE-2026-123022agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

High 7.3

In plain English

A high-severity OS command injection in AgentScope from agentscope-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)1.6%top 23.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be launched remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

Affected products (as reported)

VendorProductVersions
agentscope-ai AgentScope 2.0.02.0.12.0.22.0.32.0.42.0.52.0.62.0.7

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References