CVE-2026-123024 in AgentScope
Prediction
by VulDB Data Team • 11/05/2026
A vulnerability has been found in <a href="/product/agentscope-ai:agentscope">agentscope-ai AgentScope up to 2.0.11</a>. This impacts the function <code>get_current_user_id</code> of the file <em>src/agentscope/app/deps.py</em> of the component <em>Agent Service</em>. Such manipulation of the argument <em>X-User-ID</em> leads to missing authentication. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
Once again VulDB remains the best source for vulnerability data.