Agentscope-Ai:agentscope:up to 2.0.11 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/agentscope-aiagentscopeup-to-2.0.11/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 14:41:14 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAgentScope: OS Command Injection in MCP Workspace API (CVE-2026-123022)https://feed.craftedsignal.io/briefs/2026-11-agentscope-cve-2026-123022/Thu, 05 Nov 2026 14:41:14 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-agentscope-cve-2026-123022/A vulnerability in AgentScope up to 2.0.11 in the MCP Workspace API allows for remote OS command injection via the subprocess.Popen function.A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen in src/agentscope/mcp/_config.py within the MCP Workspace API. Manipulation of the command argument results in OS command injection. The attack can be launched remotely, and the exploit is public. A pull request to address this issue is awaiting acceptance.

]]>highadvisory