PT-2024-39089 · Unknown · Modelscope/Agentscope

Published 2024-11-12 · Updated 2025-07-30 · CVE-2024-8550

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: modelscope/agentscope version v0.0.4

Description: A Local File Inclusion (LFI) vulnerability exists in the "/load-workflow" endpoint, allowing an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outside the intended directory.

Recommendations: For modelscope/agentscope version v0.0.4, as a temporary workaround, consider disabling the /load-workflow endpoint until a patch is available. Restrict access to the os.path.join function to minimize the risk of exploitation. Avoid using the filename parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-8550

PYSEC-2025-84

Affected Products

Modelscope/Agentscope

References · 9

• 🔥 https://huntr.com/bounties/7cd8f519-7c75-4936-889d-a17ea1bcb3ea · Exploit
• https://osv.dev/vulnerability/CVE-2024-8550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8550 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-84 · Vendor Advisory
• https://t.me/cvenotify/110739 · Telegram Post
• https://twitter.com/ArunKr1shnan/status/1856535283019460745 · Twitter Post
• https://twitter.com/CVEnew/status/1889029584873787862 · Twitter Post
• https://t.me/cvedetector/17585 · Telegram Post
• https://t.me/cveNotify/130215 · Telegram Post