ModelScope MS-Agent 1.5.1 < 1.6.0 Command Injection (CVE-2026-2256)

medium Nessus Plugin ID 365564

Language:

Synopsis

The ModelScope MS-Agent library installed on the remote host is affected by a command injection vulnerability.

Description

The version of ModelScope MS-Agent installed on the remote host is 1.5.1 or later but prior to 1.6.0. It is, therefore, affected by a command injection vulnerability. The Shell tool runs commands on the host through a shell, guarded only by a regex denylist that can be bypassed, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input. (CVE-2026-2256)

Note that although the advisory lists versions 1.6.0rc1 and earlier as affected, the vulnerable Shell tool was first introduced in version 1.5.1. Versions prior to 1.5.1, including the legacy modelscope-agent package, do not contain it and are not affected.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to ModelScope MS-Agent version 1.6.0 or later.

Plugin Details

Severity: Medium

ID: 365564

File Name: ms_agent_1_6_0.nasl

Version: 1.2

Type: Local

Agent: windows, macosx, unix

Family: Artificial Intelligence

Published: 10/14/2026

Updated: 10/15/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.1

Percentile: 7.96

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS Score Source: CVE-2026-2256

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:modelscope:ms-agent

Required KB Items: installed_sw/ModelScope MS-Agent

Exploit Ease: No known exploits are available

Patch Publication Date: 3/23/2026

Vulnerability Publication Date: 3/2/2026

Reference Information

CVE: CVE-2026-2256

CWE: 77, 94

Detections

Analytics