CVE-2026-123023

HIGH 7.3

agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function check_permissions of the file src/agentscope/tool/_builtin/_bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. Upgrading to version 2.0.9 mitigates this issue. Patch name: 6b43b13a46401e86abd3defeed9a8bfe5b37bc6d. It is recommended to upgrade the affected component.

CWE	CWE-863 CWE-285
Vendor	agentscope-ai
Product	agentscope
Published	Nov 5, 2026
Last Updated	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for agentscope-ai agentscope

Be the first to know when new high vulnerabilities affecting agentscope-ai agentscope are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

agentscope-ai / AgentScope

2.0.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5 2.0.6 2.0.7 2.0.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/431396 vuldb.com: https://vuldb.com/vuln/431396/cti vuldb.com: https://vuldb.com/cve/CVE-2026-123023 vuldb.com: https://vuldb.com/submit/1033131 github.com: https://github.com/agentscope-ai/agentscope/issues/3313 github.com: https://github.com/agentscope-ai/agentscope/pull/2629 github.com: https://github.com/ybyu-ieu/agent-security-advisories/blob/main/agentscope/agentscope-bash-tool-tee-misclassification-arbitrary-file-write.md github.com: https://github.com/agentscope-ai/agentscope/commit/6b43b13a46401e86abd3defeed9a8bfe5b37bc6d github.com: https://github.com/agentscope-ai/agentscope/releases/tag/v2.0.9 github.com: https://github.com/agentscope-ai/agentscope/

Credits

🔍 Ybyu (VulDB User)