CVE-2026-123022

    Dashboard / Vulnerabilities / CVE-2026-123022

    CVE-2026-123022

    Published: 5 Nov 2026Last Modified: 7 Nov 2026

    Summary: agentscope-ai AgentScope MCP Workspace API _config.py subprocess.Popen os command injection

    Details: A vulnerability was detected in agentscope-ai AgentScope up to 2.0.11. The impacted element is the function subprocess.Popen of the file src/agentscope/mcp/_config.py of the component MCP Workspace API. The manipulation of the argument command results in os command injection. The attack may be launched remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

    References: https://github.com/agentscope-ai/agentscope/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/123xxx/CVE-2026-123022.json, https://nvd.nist.gov/vuln/detail/CVE-2026-123022, https://vuldb.com/cve/CVE-2026-123022, https://vuldb.com/submit/1033130, https://vuldb.com/vuln/431395, https://github.com/agentscope-ai/agentscope/issues/3312, https://vuldb.com/vuln/431395/cti, https://github.com/agentscope-ai/agentscope/pull/3448, https://github.com/ybyu-ieu/agent-security-advisories/blob/main/agentscope/agentscope-mcp-stdio-workspace-unauthenticated-process-execution.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- edd7cfdc11923549b1b3cc2d829ba59b2c7a49bb
    Fixed -None

    Affected versions

    2.0.0
    2.0.1
    2.0.10
    2.0.11
    2.0.2
    2.0.3
    2.0.4
    2.0.5
    2.0.6
    2.0.7
    2.0.8
    2.0.9

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-123022 | CVE-DB