modelscope/agentscope 中的路径遍历漏洞

The path traversal vulnerability in modelscope/agentscope allows an attacker to manipulate file paths, effectively bypassing security controls. This means an attacker can read and write arbitrary JSON files on the server's file system. The potential impact is significant: attackers could expose configuration files containing API keys, database credentials, or other sensitive information. They could also modify these files to inject malicious code or alter the application's behavior. The ability to write arbitrary files could lead to remote code execution if the application processes the modified JSON files without proper validation. This vulnerability presents a high risk of data breach and system compromise.

Organizations deploying modelscope/agentscope, particularly those using it in production environments or handling sensitive data, are at risk. This includes developers integrating agentscope into their applications and those relying on agentscope for workflow automation. Shared hosting environments where multiple users share the same file system are particularly vulnerable.

• python / server:

import os
import json

# Check for suspicious file paths in save_workflow and load_workflow functions
# Look for paths containing '..' or absolute paths outside of expected directories

# Example: Check if a file path contains '..'
file_path = '/path/to/file/../sensitive_file.json'
if '..' in file_path:
    print(f"Suspicious file path detected: {file_path}")

• generic web:

# Check access logs for requests containing suspicious file paths
grep '..' /var/log/apache2/access.log

1. 2025-03-20Disclosure

   disclosure

1. 已保留2024-09-06
2. 发布日期2025-03-20
3. 修改日期2025-10-15
4. EPSS 更新日期2026-04-02

The primary mitigation for CVE-2024-8551 is to upgrade to a patched version of modelscope/agentscope. Consult the project's repository or release notes for the latest version containing the fix. If upgrading immediately is not feasible, consider implementing temporary workarounds such as restricting file system access for the agentscope process to only necessary directories. Implement strict input validation on any user-supplied file paths used in the save-workflow and load-workflow functions. Monitor file system activity for unexpected file creations or modifications, particularly in sensitive directories.