CVE-2026-6604: modelscope agentscope Cloud Metadata…

Record summary

CVE-2026-6604 has a selected CVSS score of 6.9 (medium).

Description

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function _parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC

AutomatableYes

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 20, 2026 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
agentscope Browse modelscope / agentscope	CVE List	1.0.0	affected
		1.0.1	affected
		1.0.2	affected
		1.0.3	affected
		1.0.4	affected
		1.0.5	affected
		1.0.6	affected
		1.0.7	affected
		1.0.8	affected
		1.0.9	affected
		1.0.10	affected
		1.0.11	affected
		Showing 12 of 19 version ranges
agentscope Browse PyPI / agentscope	GitHub Advisory	Through 1.0.18	affected

References

gist.github.comexploit

https://gist.github.com/YLChen-007/e3e0741b297d8c2ffca59b6350d4c657

github.com

https://github.com/agentscope-ai/agentscope

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-6604

Submit #792224 | AgentScope <= 1.0.18 Server-Side Request Forgery (CWE-918)Third-party advisory

https://vuldb.com/submit/792224

VDB-358239 | modelscope agentscope Cloud Metadata Endpoint _openai_tools.py openai_audio_to_text server-side request forgeryvdb entryTechnical description

https://vuldb.com/vuln/358239

VDB-358239 | CTI Indicators (IOB, IOC, IOA)signaturepermissions required

https://vuldb.com/vuln/358239/cti