Vulnerabilities

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11.

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Agentscope-Ai

Product

AgentScope

CVSS v3.1

7.3 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness

CWE-287, CWE-306

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-123024 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 37
   CVE NVD 9h ago

   A flaw has been found in agentscope-ai AgentScope up to 2.0.8.

   PoC public CVSS 7.3 CVE-2026-123023 Agentscope-Ai