A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.
The vulnerability occurs in the /delete-workflow endpoint of the AgentScope application. Due to lack of proper input data validation, an attacker can supply a crafted file path containing path traversal sequences (e.g., ../), which allows escaping the intended working directory. As a result, the server processes the file deletion request from outside the allowed directory area, operating on any location in the file system.
An attacker can delete arbitrary files accessible to the application process, including critical configuration files, user data, or system files, which may lead to data loss or complete service unavailability (denial of service).
Patches available from the vendor should be applied according to the references. Additionally, it is recommended to run the application with minimal file system privileges and implement path validation and sanitization mechanisms on the server side.
All versions of the modelscope/agentscope application.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HModelscope Agentscope
APPModelscopeall versions
Related vulnerabilities
Błędna konfiguracja CORS w Modelscope AgentScope umożliwia nieautoryzowany dostęp do API
Path traversal w AgentScope umożliwia odczyt i zapis plików JSON
RCE przez niezabezpieczone eval() w Modelscope AgentScope
A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit thi...
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint `/api/file` d...