Cpe:2.3:a:agentscope-Ai:agentscope:*:*:*:*:*:*:*:*

AgentScope versions up to 2.0.11 contain an authentication bypass vulnerability in the Agent Service component, allowing remote attackers to manipulate the X-User-ID header to gain unauthorized access.