{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.0.4"}],"component":"agentscope","cve_ids":["CVE-2024-8550"],"ecosystem":"PyPI","epss":0.0052,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPX8Z01GTD1ZHHP4G28XC","modified_at":"2026-05-21T15:00:05.014976570Z","published_at":"2025-02-10T19:15:39.440Z","references":["https://osv.dev/vulnerability/PYSEC-2025-84","https://huntr.com/bounties/7cd8f519-7c75-4936-889d-a17ea1bcb3ea"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-84","url":"https://osv.dev/vulnerability/PYSEC-2025-84"}],"summary":"A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server,"}