AgentScope versions up to 1.0.18 contain a remote code injection vulnerability in the execute_python_code and execute_shell_command functions. This flaw allows an attacker to execute arbitrary code remotely. The vulnerability has a high severity CVSS score of 7.3 and public exploit details have been disclosed. The vendor has not responded or provided a patch.