CVE-2024-8537 json
Path Traversal in modelscope/agentscope
published last yr. modified 16d ago also GHSA-c4cc-w454-4634 , PYSEC-2026-254 , EUVD-2025-6905
- cvss
- 9.1
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 64%
- public exploits
- 0
- none known
Summary
A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.
Patch / fix
- github.com/modelscope/agentscope@7d285e8 commit
- github.com/modelscope/agentscope#459 pull request
Is CVE-2024-8537 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
1.04% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-11).
Exploits and checks
- huntr.com https://huntr.com/bounties/eeb8aa4b-e6e5-465c-b0dd-aa97e3b7dc09 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| GitHub | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| OSV | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | agentscope | <=0.1.1 |
no fix listed |
Affected products
- modelscope modelscope/agentscope
Classification
References
-
github.com
/modelscope/agentscope/pull/459
web
-
github.com
/modelscope/agentscope/commit/7d285e862f86fa1d96ed04c4cd40a5f1b8f9189a
web
-
huntr.com
/bounties/eeb8aa4b-e6e5-465c-b0dd-aa97e3b7dc09
web, exploit, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-8537
advisory
-
github.com
/modelscope/agentscope
package
-
github.com
/modelscope/agentscope/blob/01530ee6a99c86426aab1be11ec3b3b86ca640ac/src/agentscope/studio/_app.py#L743
web
-
github.com
/pypa/advisory-database/tree/main/vulns/agentscope/PYSEC-2026-254.yaml
web
-
pypi.org
/project/agentscope
web, package
-
github.com
/advisories/GHSA-c4cc-w454-4634
advisory
Sources
- CVE List CVE-2024-8537
- GitHub Advisory GHSA-c4cc-w454-4634
- NVD CVE-2024-8537
- OSV PYSEC-2026-254
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.