CVE-2026-123023: agentscope-ai AgentScope Bash Tool _bash.py check_permissions authorization
A flaw has been found in agentscope-ai AgentScope up to 2.0.8. This affects the function checkpermissions of the file src/agentscope/tool/builtin/bash.py of the component Bash Tool. This manipulation causes incorrect authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used. Upgrading to version 2.0.9 mitigates this issue. Patch name: 6b43b13a46401e86abd3defeed9a8bfe5b37bc6d. It is recommended to upgrade the affected component.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
agentscope-ai AgentScope Bash Toolto a version that resolves this vulnerability.Fixed in 2.0.9Patch 6b43b13a46401e86abd3defeed9a8bfe5b37bc6d
Event History
Frequently Asked Questions
Which versions should be treated as affected?
AgentScope versions up to and including 2.0.8 are affected. Upgrading to version 2.0.9 mitigates the issue.
Can this be exploited remotely without credentials or user interaction?
Yes. The supplied severity vector identifies network attack access, low attack complexity, no required privileges, and no user interaction.
Is public exploit code available?
Yes. The vulnerability data states that an exploit has been published and may be used.
What should teams do to remediate this issue?
Upgrade the affected AgentScope component to version 2.0.9. The referenced patch is 6b43b13a46401e86abd3defeed9a8bfe5b37bc6d.