AgentScope: Authentication bypass in Agent Service (CVE-2026-123024)
AgentScope versions up to 2.0.11 contain an authentication bypass vulnerability in the Agent Service component, allowing remote attackers to manipulate the X-User-ID header to gain unauthorized access.
CVE search metadata
CVE search record: CVE-2026-123024. Severity: high. CVSS: 7.3. KEV: no. Product: AgentScope (<= 2.0.11). Brief: AgentScope: Authentication bypass in Agent Service (CVE-2026-123024). Brief link: https://feed.craftedsignal.io/briefs/2026-11-agentscope-auth-bypass/
Triage facts
Revision 1- Applicability
- AgentScope (<= 2.0.11)
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 14:43 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
A security vulnerability exists in the Agent Service component of AgentScope (versions up to 2.0.11). The issue resides in the 'get_current_user_id' function within 'src/agentscope/app/deps.py'. An attacker can bypass authentication mechanisms by manipulating the 'X-User-ID' HTTP header. Exploitation is possible remotely and public disclosure of the vulnerability has occurred. A fix via a pull request is currently pending acceptance.
Impact
Successful exploitation allows for unauthenticated access to the Agent Service. This effectively leads to missing authentication controls for the affected endpoint.
Recommendation
- Monitor web application logs for anomalous 'X-User-ID' header values or unauthorized access attempts to the Agent Service component.
- Inventory all instances of AgentScope within the environment and track the availability of a patch for version 2.0.11 or later.
- Until a formal patch is released, consider implementing strict ingress filtering or WAF rules to restrict access to the Agent Service endpoint.
Immediate actions
Inventory AgentScope deployments and prepare for the release of a stable patch.
Threat Hunt
Inspect web server access logs for anomalous, non-standard, or missing values in the X-User-ID header directed at AgentScope endpoints.
Data: Web server access logs, WAF logs
Mitigations
Apply WAF rules to validate the format or source of the X-User-ID header, or restrict access to the Agent Service.
CVE-2026-123024