CVE-2026-85685: AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill
AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files into the skills directory, making them accessible through the workspace skill listing.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker able to submit a skill_path value to LocalWorkspace.add_skill can exploit it. The supplied data does not identify any authentication or permission checks that restrict access to this parameter.
What can an attacker access through exploitation?
The attacker can specify an arbitrary server-side directory as the source path, causing its files to be copied into the agent workspace's skills directory. Those copied files become accessible through the workspace skill listing.
Which versions are known to be affected?
AgentScope through version 2.0.7.post1 is identified as affected. No fixed version is provided in the available data.