CVE-2026-51570

12th percentile - higher than 12% of all known CVEs

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file. The vulnerability may allow access to files outside the intended directory.

An attacker could exploit the vulnerability to read or modify files outside the allowed area, potentially leading to data leakage or system integrity compromise. This may result in privilege escalation and further attacks.

Update modelscope Agentscope to a fixed version. Implement path validation in insert_text_file and limit process privileges.