CVE-2026-85685: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in agentscope-ai agentscope

CVE-2026-85685 is a path traversal vulnerability in agentscope-ai's agentscope product affecting versions up to 2.0.7.post1. The vulnerability exists in the LocalWorkspace.add_skill method, which copies files from a source path specified by the skill_path parameter into the agent workspace. Because the source path is not properly restricted, an attacker can supply arbitrary directory paths to copy files from anywhere on the server into the skills directory, making them accessible via the workspace skill listing. This can lead to unauthorized disclosure of sensitive server files. The vulnerability is remotely exploitable without authentication or user interaction, resulting in a high CVSS 4.0 score of 8.7.

An unauthenticated attacker can exploit this vulnerability to copy arbitrary files from the server into the agent workspace's skills directory, potentially exposing sensitive server files through the skill listing interface. This unauthorized file access can lead to information disclosure and may aid further attacks depending on the contents of the exposed files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the affected functionality to untrusted users or restrict access to trusted environments only.