A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command o…

A code injection vulnerability was discovered in ModelScope AgentScope up to version 1.0.18. The vulnerability affects the execute_python_code/execute_shell_command functions in the _python.py file. The flaw allows remote code injection attacks and has been publicly disclosed with available exploits. The vendor was notified but did not respond to the disclosure.