CVE-2026-51922: Code Injection

Published Oct 2, 2026

Updated

agentscope v1.0.20 contains code injection in executeshellcommand (src/agentscope/tool/coding/shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.

Affected Software

1 affected component

pypi/agentscope=1.0.20

Event History

Oct 2, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:16 PM

Description

Frequently Asked Questions

Which release is identified as affected?

The reported affected release is agentscope v1.0.20.

What access would an attacker need to exploit this issue?

An attacker would need access to an exposed entry that can reach execute_shell_command with attacker-controlled input. The available data does not identify which entries are exposed in a particular deployment.

CVE-2026-51922: Code Injection

Affected Software

Event History

Frequently Asked Questions

Which release is identified as affected?

What access would an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which release is identified as affected?

What access would an attacker need to exploit this issue?