This vulnerability in modelscope agentscope (up to version 1.0.18) involves code injection through the execute_python_code and execute_shell_command functions. These functions improperly handle input, allowing remote attackers to execute arbitrary code on affected systems. The vulnerability is remotely exploitable without authentication or user interaction. Despite early notification, the vendor has not issued any patch or official remediation. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and low to low impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system, potentially compromising system integrity and confidentiality. Given the lack of vendor response and patch, affected systems remain vulnerable. The medium severity reflects the potential for significant impact but with some limitations in exploit complexity or impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider applying workarounds such as disabling or restricting access to the vulnerable functions if possible, or isolating affected systems until a patch is available. Monitor official vendor channels for updates.