CVE-2026-51568: Path Traversal

Q: What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges and can be exploited over the network. No user interaction is required.

Q: What security impact could successful exploitation have?

Successful exploitation can result in high confidentiality and integrity impact. The vulnerability is classified as path traversal in the write_text_file functionality.

Published Sep 30, 2026

Updated

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile.

Affected Software

1 affected component

modelscope agentscope>=1.0.0<=1.0.18

Event History

Sep 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The vulnerability requires low-level privileges and can be exploited over the network. No user interaction is required.

What security impact could successful exploitation have?