CyberRota Analysis
AI-GeneratedAgentscope v1.0.20 is vulnerable to code injection in the `execute_shell_command` function, allowing attackers to execute arbitrary code or commands if they can access the affected entry point. This vulnerability poses a significant risk to systems using this version, particularly in environments where untrusted input can be processed. Organizations utilizing Agentscope should prioritize patching or mitigating this vulnerability to prevent potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.