id: PYSEC-2026-255
published: "2026-06-29T11:50:35.430041Z"
modified: "2026-07-01T20:22:47.633996Z"
aliases:
- CVE-2024-8551
- GHSA-j9rw-qm5f-r8xm
summary: AgentScope path traversal vulnerability in save-workflow
details: A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords.
affected:
- package:
    name: agentscope
    ecosystem: PyPI
    purl: pkg:pypi/agentscope
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - last_affected: 0.1.1
  versions:
  - 0.0.1
  - 0.0.2
  - 0.0.3
  - 0.0.4
  - 0.0.5
  - 0.0.5a1
  - 0.0.6a1
  - 0.0.6a2
  - 0.1.0
  - 0.1.1
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2024-8551
- type: PACKAGE
  url: https://github.com/modelscope/agentscope
- type: WEB
  url: "https://github.com/modelscope/agentscope/blob/01530ee6a99c86426aab1be11ec3b3b86ca640ac/src/agentscope/studio/_app.py#L680"
- type: WEB
  url: https://huntr.com/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989
- type: PACKAGE
  url: https://pypi.org/project/agentscope
- type: ADVISORY
  url: https://github.com/advisories/GHSA-j9rw-qm5f-r8xm
severity:
- type: CVSS_V3
  score: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H