Threats affecting pkg:pypi/agentscope

agentscope version 1.0.20 and earlier contains a critical code injection vulnerability in the execute_shell_command function. This flaw allows an attacker to execute arbitrary code or commands if they can reach the vulnerable entry point. The vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.

In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can directly execute user-provided commands.