Directory Traversal in modelscope/agentscope

The primary impact of CVE-2024-8524 is unauthorized access to sensitive data stored in JSON files on the server. An attacker exploiting this vulnerability could potentially read configuration files, API keys, or other sensitive information that could be used to compromise the system further. While the vulnerability itself doesn't grant remote code execution, the information gained could be leveraged for privilege escalation or lateral movement within the network. The blast radius depends on the sensitivity of the JSON files accessible through this endpoint and the attacker's ability to exploit the obtained information.

Organizations using modelscope/agentscope in their Python applications, particularly those deploying it in environments where sensitive data is stored as JSON files, are at risk. This includes developers integrating agentscope into their AI workflows and those using it in shared hosting environments where file system access might be less restricted.

• python / server:

import requests

url = 'http://your-target-server/read-examples'
payload = {'file': '..//../../../../etc/passwd'}

response = requests.post(url, data=payload)

if 'root:' in response.text:
    print('Potential vulnerability detected!')
else:
    print('No vulnerability detected.')

• generic web:

curl -X POST http://your-target-server/read-examples -d 'file=../../../../etc/passwd' | grep 'root:'

1. 2025-03-20Disclosure

   disclosure

1. Reserviert2024-09-06
2. Veröffentlicht2025-03-20
3. Geändert2025-10-15
4. EPSS aktualisiert2026-04-02

Due to the lack of a specific fixed version, immediate mitigation focuses on restricting access to the /read-examples endpoint. Implement strong authentication and authorization controls to limit who can access this endpoint. Consider using a Web Application Firewall (WAF) to filter requests and block those containing malicious path traversal sequences. Input validation on the /read-examples endpoint is crucial to prevent attackers from manipulating the file path. Regularly review and update the modelscope/agentscope package to benefit from future security patches.