Product
A vulnerability in AgentScope up to 2.0.11 in the MCP Workspace API allows for remote OS command injection via the subprocess.Popen function.