CVE-2026-51922
Summary
| CVE | CVE-2026-51922 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-10-02 16:16:51 UTC |
| Updated | 2026-10-02 18:47:49 UTC |
| Description | agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution. |
Risk And Classification
Problem Types: n/a
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| gist.github.com/Ro1ME/78910899a99e2ba702d588e477d0755f | [email protected] | gist.github.com | |
| github.com/agentscope-ai/agentscope/issues/1645 | [email protected] | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.