CVE-2026-6603 modelscope agentscope _python.py execute_shell_command code injection
Remote attackers can execute arbitrary code via the execute_shell_command function in the agentscope library, requiring immediate mitigation due to public exploit availability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-6603?
CVE-2026-6603 is a medium-severity code injection vulnerability in modelscope agentscope, published on 20 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was determined in modelscope agentscope up to 1.0.18. Affected by this vulnerability is the function execute_python_code/execute_shell_command of the file src/AgentScope/tool/_coding/_python.py. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Which versions are affected by CVE-2026-6603?
3 open source packages ship an affected version, including agentscope.
| Package | Affected | Fixed in |
|---|---|---|
agentscope PyPI | All versions to 1.0.18 | None |
agentscope PyPI | All versions to 1.0.18 | None |
agentscope PyPI | All versions to 1.0.18 | None |
How do I fix CVE-2026-6603?
No fix has been published for CVE-2026-6603 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-6603 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-6603 exists.
Sources
Also known as GHSA-cr24-fv3h-8cjm, PYSEC-2026-2331.