CVE-2026-2256

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-77

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
ModelScope	ms-agent	<= v1.6.0rc1

References

Timeline

Published: Mar 2, 2026
Last modified: Jun 17, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-225605.3An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by manipulating parame CVE-2026-225617.8Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privil CVE-2026-225629.8A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write f CVE-2026-225639.8A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play net CVE-2026-225649.8An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthori CVE-2026-225657.5An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop r CVE-2026-225667.5An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi crede CVE-2026-225672.7Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions thro CVE-2026-225682.7Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to acc CVE-2026-225695.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from be CVE-2026-22576.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missi CVE-2026-225727.2An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0