GHSA-4gc2-344q-r2rw

MS-Agent vulnerable to Command Injection

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-2256

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	ms-agent	<= 1.6.0rc1	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A Command Injection vulnerability in ModelScope's MS-Agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-2256 advisory
https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC web
https://github.com/modelscope/ms-agent package
https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326 web
https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use web
https://www.kb.cert.org/vuls/id/431821 web