Vendor
AgentScope versions up to 2.0.11 contain an authentication bypass vulnerability in the Agent Service component, allowing remote attackers to manipulate the X-User-ID header to gain unauthorized access.