PT-2026-33710 · Modelscope · Agentscope

Eric-F · Published 2026-04-20 · Updated 2026-04-20 · CVE-2026-6604

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions modelscope agentscope versions prior to 1.0.19

Description An issue exists in the Cloud Metadata Endpoint component within the file src/agentscope/tool/ multi modality/ openai tools.py. Specifically, the functions parse url(), prepare image(), and openai audio to text() do not properly handle the image url and audio file url arguments. This allows a remote attacker to perform server-side request forgery, which is a technique where an attacker induces a server-side application to make requests to an unintended location.

Recommendations Update to a version newer than 1.0.18. As a temporary workaround, restrict access to the functions parse url(), prepare image(), and openai audio to text() or avoid using the image url and audio file url arguments until a patch is applied.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-6604

GHSA-659X-HM75-HPV7

Affected Products

Agentscope

References · 8

• 🔥 https://gist.github.com/YLChen-007/e3e0741b297d8c2ffca59b6350d4c657 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6604 · Security Note
• https://osv.dev/vulnerability/GHSA-659x-hm75-hpv7 · Vendor Advisory
• https://github.com/agentscope-ai/agentscope · Note
• https://vuldb.com/vuln/358239/cti · Note
• https://vuldb.com/submit/792224 · Note
• https://vuldb.com/vuln/358239 · Note
• https://twitter.com/VulmonFeeds/status/2046141729196188084 · Twitter Post