CVE-2026-123022agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be launched remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

6.9 MEDIUMEPSS 1.63%Not in KEVNVD: Deferred

Last updated: 2026-11-05 17:18 UTC

OverviewCVSS details

6.9MEDIUMCVSS 4.0

Score source: VulDB (CNA)
NVD status: Deferred
Published: Nov 5, 2026
Assigner: VulDB

Affected

AgentScope (agentscope-ai)

Versions: 2.0.0 · 2.0.1

All affected versions →

Exploitation

Public exploit: Yes · 1 reference
CISA KEV: Not listed
KEV due date: —
SSVC: Exploitation none · Automatable yes · Impact total

EPSS · FIRST, scored Nov 7

1.63%chance of exploitation in 30 days

Higher than 76.48% of CVEs

CVSS 4.0 · VulDB (CNA)

6.9Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Attack vector: Network
Attack complexity: Low
Attack requirements: None
Privileges required: None
User interaction: None
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low
Confidentiality (other systems): None
Integrity (other systems): None
Availability (other systems): None

CVSS 4.0 · VulDB (CNA)

5.5Medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Attack vector: Network
Attack complexity: Low
Attack requirements: None
Privileges required: None
User interaction: None
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low
Confidentiality (other systems): None
Integrity (other systems): None
Availability (other systems): None

CVSS 3.1 · VulDB (CNA)

7.3High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 3.1 · VulDB (CNA)

7.3High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 3.0 · VulDB (CNA)

7.3High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low

CVSS 2.0 · VulDB (CNA)

7.5High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

CVSS 2.0 · VulDB (CNA)

7.5High

AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C

Attack vector: Network
Attack complexity: Low
Authentication: None
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

NVD status: Deferred

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
6.9	MEDIUM	4.0VulDB (CNA)	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
5.5	MEDIUM	4.0VulDB (CNA)	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
7.3	HIGH	3.1VulDB (CNA)	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.3	HIGH	3.1VulDB (CNA)	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
7.3	HIGH	3.0VulDB (CNA)	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:C
7.5	HIGH	2.0VulDB (CNA)	AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5	HIGH	2.0VulDB (CNA)	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C

Details

CVE ID: CVE-2026-123022
Status: Deferred
Assigner (CNA): VulDB
Published: Nov 5, 2026
Last modified: 2026-11-05 17:18 UTC
Weaknesses: CWE-78 · OS Command Injection
CWE-77 · Command Injection

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 08:19 UTC.