A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint `/api/file` does not properly sanitize the `path` parameter, allowing an attacker to read arbitrary files on the server.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| agentscope(PyPI) | 0 | N/A | N/A |
CVSS Metrics
