agentscope-ai CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH agentscope-ai CVE published 2026-09-04

CVE-2026-85685

CVE-2026-85685 is a high-severity path traversal vulnerability in AgentScope through 2.0.7.post1. The vulnerability allows attackers to copy arbitrary server directories into the agent workspace by manipulating the skill_path request parameter in LocalWorkspace.add_skill. This makes the copied files accessible through the workspace skill listing. Defenders should assess exposure, verify vulnerability pres [truncated]