← Back to search

CVE-2026-51568

8.1 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI risk analysis

Summary
The flaw allows path traversal, enabling an attacker to write files to arbitrary locations, potentially leading to unauthorized data manipulation or execution of malicious code.
Exploitability
Exploitation requires control over the input path, making it moderately difficult. Precondition is the presence of untrusted input in file paths.
Blast radius
If exploited, the impact could be significant, allowing attackers to alter critical system files or inject malicious content, leading to potential data loss or system compromise.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to v1.0.19 or later.
path-traversalfile-writesecurity-vulnerability

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-22

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.