Threats tagged 'ghsa-cj2c-23cc-r2qj'

agentscope version 1.0.20 and earlier contains a critical code injection vulnerability in the execute_shell_command function. This flaw allows an attacker to execute arbitrary code or commands if they can reach the vulnerable entry point. The vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.