ModelScope AgentScope Path Traversal Vulnerability Allowing Arbitrary File Read
Vulnerability
A path traversal vulnerability has been identified in ModelScope AgentScope version 0.0.4. The issue arises in the API endpoint '/api/file', where the 'path' parameter is not properly sanitized. This lack of validation enables attackers to read arbitrary files from the server.
Impact
Exploitation of this vulnerability allows for arbitrary file read on the server.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
3.3exploitability
8.7remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.