Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

agentscope 1.0.20 lets attacker run arbitrary commands

CVE-2026-51922 · published 16 days ago
Summary

The agentscope software version 1.0.20 contains a flaw in its command‑execution feature that can let a remote user supply and run their own code on the host system. This could allow unauthorized actions such as installing software, accessing data, or disrupting services. Update to a patched version or disable the vulnerable feature until a fix is applied.

Original advisory text
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or comm...
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published2 Oct 2026
Updated15 Oct 2026
First seen2 Oct 2026
Sources
CVE-2026-51922 · NVD
CVE-2026-51922 · MITRE
Track software like this
Free during beta