CVE-2026-2256
2 advisories.
PyPI/ms-agent CVE-2026-2256: medium 6.5
MS-Agent vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.6.0rc1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-4gc2-344q-r2rw
- https://nvd.nist.gov/vuln/detail/CVE-2026-2256
- https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC
- https://github.com/modelscope/ms-agent
- https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326
- https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use
- https://www.kb.cert.org/vuls/id/431821
CVE-2026-2256 · published · modified · JSON
PyPI/ms-agent CVE-2026-2256: medium 6.5
MS-Agent vulnerable to Command Injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.6.0rc1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2668
- https://nvd.nist.gov/vuln/detail/CVE-2026-2256
- https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC
- https://github.com/modelscope/ms-agent
- https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326
- https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use
- https://www.kb.cert.org/vuls/id/431821
- https://pypi.org/project/ms-agent
- https://github.com/advisories/GHSA-4gc2-344q-r2rw
CVE-2026-2256 · published · modified · JSON