PT-2025-12233 · Dill+1 · Dill+1

Published 2025-03-20 · Updated 2025-03-21 · CVE-2024-8502

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions modelscope/agentscope version 0.0.6a3

Description A vulnerability in the RpcAgentServerLauncher class allows for remote code execution (RCE) via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create agent method, where serialized input is deserialized using dill.loads, enabling an attacker to execute arbitrary commands on the server.

Recommendations For modelscope/agentscope version 0.0.6a3, consider disabling the AgentServerServicer.create agent method until a patch is available to prevent remote code execution. Restrict access to the RpcAgentServerLauncher class to minimize the risk of exploitation. Avoid using the dill.loads function to deserialize untrusted input in the affected API endpoint until the issue is resolved.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-8502

GHSA-9W5H-67GF-XVV8

Affected Products

Dill

Modelscope/Agentscope

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-8502 · Security Note
• https://osv.dev/vulnerability/GHSA-9w5h-67gf-xvv8 · Vendor Advisory
• https://github.com/modelscope/agentscope · Note
• https://huntr.com/bounties/7a42da2a-2ae5-442d-aff9-c9a3b47870eb · Note
• https://twitter.com/CVEnew/status/1902968883721671119 · Twitter Post