modelscope vulnerabilities

CVEs per yearBy the year they were published

1. 202510
2. 20268

Newest CVEs

• CVE-2026-85686

  ms-swift 4.5.2 Unauthenticated SSRF via Multimodal Media URLs

  modelscope · ms-swift

  High8.7
• CVE-2026-84202

  ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading

  modelscope · modelscope

  High8.7
• CVE-2026-10801

  modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash

  modelscope · ms-swift

  Low2.0
• CVE-2026-6606

  modelscope agentscope _agent_base.py _process_audio_block server-side request forgery

  modelscope · agentscope

  Medium6.9
• CVE-2026-6605

  modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery

  modelscope · agentscope

  Medium6.9
• CVE-2026-6604

  modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgery

  modelscope · agentscope

  Medium6.9
• CVE-2026-6603

  modelscope agentscope _python.py execute_shell_command code injection

  modelscope · agentscope

  Medium6.9
• CVE-2026-2256

  Command injection vulnerability in ModelScope's ms-agent

  ModelScope · ms-agent

  Medium6.5
• CVE-2024-8487

  CORS Vulnerability in modelscope/agentscope

  modelscope · modelscope/agentscope

  High7.4
• CVE-2024-8556

  Stored XSS in modelscope/agentscope

  modelscope · modelscope/agentscope

  Medium6.1