CVE-2024-8524: Directory Traversal in modelscope/agentscope

The directory traversal vulnerability in modelscope/agentscope allows an attacker to bypass intended access controls and read arbitrary files on the server. Specifically, by crafting a malicious POST request to the /read-examples endpoint, an attacker can specify a path that leads to any file accessible by the application's user. This could expose configuration files, API keys, database credentials, or other sensitive data stored as JSON. The blast radius depends on the permissions of the application user; if the application runs with elevated privileges, the attacker could potentially access a wider range of files and data. While no direct remote code execution is possible, the exposure of sensitive data can lead to further compromise and lateral movement within the network.

1. Reserved2024-09-06
2. Published2025-03-20
3. Modified2025-10-15
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-8524 is to upgrade to a patched version of modelscope/agentscope as soon as it becomes available. Until a patch is released, consider implementing input validation on the /read-examples endpoint to prevent attackers from manipulating the file path. A Web Application Firewall (WAF) could be configured to block requests containing suspicious path traversal sequences (e.g., ../). Monitor application logs for unusual file access patterns, particularly requests to the /read-examples endpoint. After upgrading, verify the fix by attempting to access a non-existent file through the /read-examples endpoint and confirming that access is denied.