Vibe Coding
CVE-2026-85685: AgentScope's add_skill copies any server directory into the agent workspace
AgentScope through 2.0.7.post1 has a path traversal in LocalWorkspace.add_skill, which copies arbitrary server directories into the agent workspace via an unconfined skill_path request parameter. An attacker names any directory and its files land in the skills directory, where the agent will read them. Skill installation is a file-copy primitive pointed at the one directory an agent is designed to trust and load from.
Source
↳ Follow the thread