Not scored
CVE-2026-2256
Command injection vulnerability in ModelScope's ms-agent
ModelScopems-agent
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
1.7%probability of exploitation in the next 30 days
Higher than 77% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.
Coverage 1 article · 1 outlet
- CVE-2026-2256: MS-Agent Shell flaw lets attackers run OS commandsSecurityWeek · first in our coverage