ModelScope

Products

Exploited and recent CVEs

• CVE-2026-85686 High 7.5 ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs 0.5%
• CVE-2026-84202 High 8.8 ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading 0.7%
• CVE-2026-10801 Low 3.6 modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash <0.1%
• CVE-2026-6606 High 7.3 modelscope agentscope _agent_base.py _process_audio_block server-side request forgery 0.3%
• CVE-2026-6605 High 7.3 modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery 0.3%
• CVE-2026-6604 High 7.3 modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery 0.3%
• CVE-2026-6603 High 7.3 modelscope agentscope _python.py execute_shell_command code injection 0.3%
• CVE-2026-2256 Medium 6.5 Command injection vulnerability in ModelScope's ms-agent 1.7%
• CVE-2024-8487 High 7.4 CORS Vulnerability in modelscope/agentscope 0.3%
• CVE-2024-8556 Medium 6.1 Stored XSS in modelscope/agentscope 0.4%
• CVE-2024-8524 High 7.5 Directory Traversal in modelscope/agentscope 1.2%
• CVE-2024-8537 Critical 9.1 Path Traversal in modelscope/agentscope 1.0%
• CVE-2024-8551 Critical 9.1 Path Traversal in modelscope/agentscope 1.0%
• CVE-2024-8438 High 7.5 Path Traversal in modelscope/agentscope 0.8%
• CVE-2024-8502 Critical 9.8 Remote Code Execution via Deserialization in modelscope/agentscope 1.8%
• CVE-2024-8489 High 8.8 CSRF due to overly permissive CORS headers in modelscope/agentscope 0.2%
• CVE-2024-8501 High 7.5 Arbitrary File Download in modelscope/agentscope 1.0%
• CVE-2024-8550 High 7.5 Local File Inclusion (LFI) in modelscope/agentscope 0.5%