CVE-2024-8551 json
Path Traversal in modelscope/agentscope
published last yr. modified 16d ago also GHSA-j9rw-qm5f-r8xm , PYSEC-2026-255 , EUVD-2025-6899
- cvss
- 9.1
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 63%
- public exploits
- 0
- none known
Summary
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope versions prior to the fix. This vulnerability allows an attacker to read and write arbitrary JSON files on the filesystem, potentially leading to the exposure or modification of sensitive information such as configuration files, API keys, and hardcoded passwords.
Is CVE-2024-8551 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
1.02% chance of exploitation in the next 30 days, higher than 63% of all scored CVEs (FIRST EPSS, 2026-11-11).
Exploits and checks
- huntr.com https://huntr.com/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| GitHub | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| OSV | 3.0 | 9.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | agentscope | <=0.1.1 |
no fix listed |
Affected products
- modelscope modelscope/agentscope
Classification
References
-
huntr.com
/bounties/e0c0c294-f1e2-4f2c-a632-a9be9fd06989
web, exploit, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-8551
advisory
-
github.com
/modelscope/agentscope
package
-
github.com
/modelscope/agentscope/blob/01530ee6a99c86426aab1be11ec3b3b86ca640ac/src/agentscope/studio/_app.py#L680
web
-
github.com
/pypa/advisory-database/tree/main/vulns/agentscope/PYSEC-2026-255.yaml
web
-
pypi.org
/project/agentscope
web, package
-
github.com
/advisories/GHSA-j9rw-qm5f-r8xm
advisory
Sources
- CVE List CVE-2024-8551
- GitHub Advisory GHSA-j9rw-qm5f-r8xm
- NVD CVE-2024-8551
- OSV PYSEC-2026-255
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.