AgentScope Bash tool incorrect authorization flaw

Summary

An incorrect authorization flaw in the check_permissions function of AgentScope's Bash tool lets a remote attacker perform actions they should not be allowed to. Versions up to 2.0.8 are affected, and a public exploit exists.

What to do

Update to version 2.0.9.

Products and platforms

• AgentScope

CVE IDs

• CVE-2026-123023 (opens in a new tab)

Sources

• Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-05 13:30 UTC

First seen 2026-11-09 16:40 UTC