Executive brief
AgentScope is a framework used to build multi-agent applications. A security flaw in its web-based studio component allows an attacker to bypass folder restrictions and read sensitive JSON files from the host server. This could lead to the exposure of configuration data, credentials, or internal application logic.
Technical details
A directory traversal vulnerability (CWE-22) exists in the AgentScope Studio component within the `/read-examples` endpoint. The root cause is improper neutralization of user-supplied path sequences in a POST request, allowing an attacker to escape the intended directory. By crafting a request with traversal sequences (e.g., `../`), an unauthenticated remote attacker can read any JSON file on the local filesystem that the application process has permissions to access. This vulnerability affects version 0.0.4 and earlier; no patched version is currently specified in the advisory.
Affected products
- ModelScope AgentScope <= 0.0.4
Timeline
- 2025-03-20: disclosed
- 2025-03-20: advisory