The vulnerability CVE-2026-6606 affects modelscope agentscope up to version 1.0.18. It arises from improper handling of the url parameter in the _process_audio_block function, allowing an attacker to perform server-side request forgery. This enables an attacker to make the server send crafted requests to internal or external systems, potentially bypassing network restrictions. The vulnerability is remotely exploitable without any privileges or user interaction. Despite public disclosure and availability of an exploit, no official fix or remediation has been provided by the vendor.

Successful exploitation of this SSRF vulnerability could allow an attacker to induce the affected server to make arbitrary HTTP requests. This may lead to unauthorized access to internal resources, information disclosure, or interaction with other systems that the server can reach. The CVSS score of 6.9 reflects a medium impact, with low vector and integrity impact but some availability and confidentiality impact. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider implementing network-level restrictions to limit the server's ability to make arbitrary outbound requests, and apply input validation or filtering on the url parameter if possible.