A vulnerability was found in modelscope agentscope up to 1.0.18. It has been declared as critical. Affected by this issue is the function
_parse_url/prepare_image/openai_audio_to_text of the file src/agentscope/tool/_multi_modality/_openai_tools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument image_url/audio_file_url leads to server-side request forgery.
This vulnerability is listed as CVE-2026-6604. The attack may be performed from remote. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
