# CVE-2024-8487: ModelScope AgentScope CORS vulnerability in API server

Source: https://junglewise.ai/threats/cve-2024-8487-modelscope-agentscope-cors-vulnerability-in-api-server  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-03-20. Updated: 2026-06-05  
License: CC BY 4.0 with a link back

CVE-2024-8487 · Severity: high · CVSS 7.4 · Published 2025-03-20

AgentScope is a framework used to build multi-agent applications powered by large language models. A security flaw in its server configuration allows unauthorized websites to interact with the AgentScope API. This could enable an attacker to steal sensitive data or interact with the system on behalf of a legitimate user if they visit a malicious website.

Technologies: [agentscope (PyPI)](https://junglewise.ai/threats/technologies/agentscope). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2024-8487 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-8487 being exploited in the wild.

**How severe is CVE-2024-8487?** High severity, with a CVSS score of 7.4, published 20 March 2025.

**Which products and versions are affected?** agentscope (PyPI) <= 0.0.4, ECOSYSTEM:introduced=0,last_affected=0.0.4.

**Is there a fix for CVE-2024-8487?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-8487 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2024-8487?** Check whether you run agentscope (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Cross-Origin Resource Sharing (CORS) vulnerability (CWE-346) exists in modelscope/agentscope version 0.0.4 and earlier. The server's CORS policy is overly permissive, failing to restrict access to trusted origins and allowing any external domain to perform API requests. An attacker can exploit this by hosting a malicious webpage that, when visited by a user with access to the AgentScope server, executes cross-origin requests to extract sensitive information or perform unauthorized actions. This vulnerability requires user interaction (visiting a malicious site) but results in a high impact on confidentiality. No patch is currently specified in the advisory.

## Affected products

- ModelScope AgentScope <= 0.0.4

## Identifiers

- CVE-2024-8487
- GHSA-75v5-6885-59f9
- PYSEC-2025-81

## Timeline

- 2025-03-20: advisory: GitHub Advisory published
- 2025-03-20: disclosed: NVD publication date

## References

- [https://huntr.com/bounties/7aca7507-a94e-4e63-83a2-15648e5c4067](https://huntr.com/bounties/7aca7507-a94e-4e63-83a2-15648e5c4067)
- [https://github.com/pypa/advisory-database/tree/main/vulns/agentscope/PYSEC-2025-81.yaml](https://github.com/pypa/advisory-database/tree/main/vulns/agentscope/PYSEC-2025-81.yaml)

## Related threats

- [PYSEC-2026-1076 - AgentScope stored cross-site scripting (XSS) vulnerability](https://junglewise.ai/threats/cve-2024-8556-agentscope-stored-cross-site-scripting-xss-vulnerability)
- [AgentScope vulnerable to Server-Side Request Forgery](https://junglewise.ai/threats/cve-2026-6606-agentscope-vulnerable-to-server-side-request-forgery)
- [AgentScope vulnerable to Server-Side Request Forgery](https://junglewise.ai/threats/cve-2026-6605-agentscope-vulnerable-to-server-side-request-forgery)
- [AgentScope vulnerable to Server-Side Request Forgery](https://junglewise.ai/threats/cve-2026-6604-agentscope-vulnerable-to-server-side-request-forgery)
- [PYSEC-2026-2331 - AgentScope Vulnerable to Remote Code Injection](https://junglewise.ai/threats/cve-2026-6603-agentscope-vulnerable-to-remote-code-injection)