CVE-2026-123022 in AgentScope
Prediction
by VulDB Data Team • 11/05/2026
A vulnerability was detected in <a href="/product/agentscope-ai:agentscope">agentscope-ai AgentScope up to 2.0.11</a>. The impacted element is the function <code>subprocess.Popen</code> of the file <em>src/agentscope/mcp/_config.py</em> of the component <em>MCP Workspace API</em>. The manipulation of the argument <em>command</em> results in os command injection. The attack may be launched remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.
VulDB is the best source for vulnerability data and more expert information about this specific topic.