CVE-2026-6604

modelscope · agentscope

A vulnerability has been identified in modelscope agentscope that could lead to potential security compromises.

Executive summary

A high-severity vulnerability identified in modelscope agentscope requires urgent remediation to protect against unauthorized system exploitation.

Vulnerability

The vulnerability affects the internal handling of operations within agentscope. The specific mechanism of the flaw and the required level of attacker authentication are currently being reviewed by the vendor.

Business impact

With a CVSS score of 7.3, this vulnerability represents a high risk to the confidentiality and integrity of data handled by the agentscope platform. Failure to remediate may result in unauthorized access or the compromise of sensitive automated processes.

Remediation

Immediate Action: Apply the latest vendor security updates to all agentscope instances immediately.

Proactive Monitoring: Maintain detailed audit logs of all agent operations and alert on any anomalous activity or unexpected system calls.

Compensating Controls: Use network-level controls to restrict access to the agentscope management interface and deploy WAF rules to filter potentially malicious incoming requests.

Exploitation status

Public Exploit Available: false

Analyst recommendation

It is imperative that all users of modelscope agentscope update their software to the latest version. Proactive patching is the most effective defense against this vulnerability, and failure to act may leave critical automation infrastructure vulnerable to exploitation.