CVE-2026-2256
- Source
- https://cve.org/CVERecord?id=CVE-2026-2256
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2256.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-2256
- Aliases
- Published
- 2026-03-02T20:09:11Z
- Modified
- 2026-10-21T02:56:22Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- Command injection vulnerability in ModelScope's ms-agent
- Details
-
A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.
- Database specific
{ "cna_assigner": "certcc", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2256.json" }- References
-
- https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326
- https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use
- https://www.kb.cert.org/vuls/id/431821
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2256.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-2256
- https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC
- https://github.com/modelscope/ms-agent
Affected packages
Git / github.com/modelscope/ms-agent
Affected ranges
- Type
- GIT
- Repo
- https://github.com/modelscope/ms-agent
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "last_affected": "v1.6.0rc1" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "0" }, { "last_affected": "1.6.0rc1" } ], "source": "DESCRIPTION" } ] }