AgentScope (<= 2.0.8) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/agentscope--2.0.8/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 16:20:55 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAgentScope: Incorrect authorization in Bash Tool (CVE-2026-123023)https://feed.craftedsignal.io/briefs/2026-11-agentscope-auth-bypass-4f8d4050/Thu, 05 Nov 2026 16:20:55 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-agentscope-auth-bypass-4f8d4050/AgentScope versions 2.0.8 and earlier contain an authorization flaw in the Bash Tool component that allows remote attackers to bypass permission checks and execute unauthorized commands.A vulnerability exists in the check_permissions function within src/agentscope/tool/_builtin/_bash.py of the AgentScope Bash Tool. The vulnerability is caused by incorrect authorization logic, which can be exploited remotely to perform unauthorized actions. A public exploit is available. This issue is resolved in version 2.0.9.

Impact

Successful exploitation allows a remote attacker to bypass intended authorization constraints, resulting in unauthorized command execution via the affected Bash tool component.

Recommendation

  • Upgrade AgentScope to version 2.0.9 or later immediately.
  • Audit logs for instances of the AgentScope Bash Tool execution to identify unauthorized access attempts.
  • If upgrading is not immediately possible, restrict network access to environments hosting AgentScope instances.
]]>highadvisory