CVE-2026-123022
agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be launched remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.
| CWE | CWE-78 CWE-77 |
| Vendor | agentscope-ai |
| Product | agentscope |
| Published | Nov 5, 2026 |
| Last Updated | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for agentscope-ai agentscope
Be the first to know when new high vulnerabilities affecting agentscope-ai agentscope are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
agentscope-ai / AgentScope
2.0.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.7 2.0.8 2.0.9 2.0.10 2.0.11
References
vuldb.com: https://vuldb.com/vuln/431395 vuldb.com: https://vuldb.com/vuln/431395/cti vuldb.com: https://vuldb.com/cve/CVE-2026-123022 vuldb.com: https://vuldb.com/submit/1033130 github.com: https://github.com/agentscope-ai/agentscope/issues/3312 github.com: https://github.com/agentscope-ai/agentscope/pull/3448 github.com: https://github.com/ybyu-ieu/agent-security-advisories/blob/main/agentscope/agentscope-mcp-stdio-workspace-unauthenticated-process-execution.md github.com: https://github.com/agentscope-ai/agentscope/
Credits
🔍 Ybyu (VulDB User) VulDB CNA Team