CVE-2026-51568

33th percentile - higher than 33% of all known CVEs

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file. The vulnerability may allow writing files outside the intended directory.

An attacker could exploit the vulnerability to write or overwrite files outside the allowed area, potentially leading to system integrity compromise or malicious code execution. This may result in privilege escalation and further attacks.

Update modelscope Agentscope to a fixed version. Implement path validation in write_text_file and limit process privileges.