How severe is CVE-2024-8537?

CVE-2024-8537 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.

Is CVE-2024-8537 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (57th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-8537?

CVE-2024-8537 affects Modelscope Agentscope. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2024-8537?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2024-8537 have an EU (EUVD) identifier?

Yes. CVE-2024-8537 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-6905.

When was CVE-2024-8537 published?

CVE-2024-8537 was published on 2025-03-20 and last updated on 2026-06-17.

CVE-2024-8537

CVE-2024-8537 is a critical-severity vulnerability in Modelscope Agentscope with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-29.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
EPSS exploit prediction: 1% (57th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-6905
Weakness: CWE-29
Affected product: Modelscope Agentscope
Published: 2025-03-20
Last modified: 2026-06-17

Description

A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.

Frequently asked questions

What is CVE-2024-8537?: A path traversal vulnerability exists in the modelscope/agentscope application, affecting all versions. The vulnerability is present in the /delete-workflow endpoint, allowing an attacker to delete arbitrary files from the filesystem. This issue arises due to improper input validation, enabling the attacker to manipulate file paths and delete sensitive files outside of the intended directory.
How severe is CVE-2024-8537?: CVE-2024-8537 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability high.
Is CVE-2024-8537 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (57th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-8537?: CVE-2024-8537 affects Modelscope Agentscope. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2024-8537?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2024-8537 have an EU (EUVD) identifier?: Yes. CVE-2024-8537 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-6905.
When was CVE-2024-8537 published?: CVE-2024-8537 was published on 2025-03-20 and last updated on 2026-06-17.

References

https://huntr.com/bounties/eeb8aa4b-e6e5-465c-b0dd-aa97e3b7dc09

Affected products (1)

cpe:2.3:a:modelscope:agentscope:*:*:*:*:*:*:*:*

More vulnerabilities in Modelscope Agentscope

CVE-2024-8487 — Critical (CVSS 9.8): A Cross-Origin Resource Sharing (CORS) vulnerability exists in modelscope/agentscope version v0.0.4. The CORS…
CVE-2024-48050 — Critical (CVSS 9.8): In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression.…
CVE-2024-8551 — Critical (CVSS 9.1): A path traversal vulnerability exists in the save-workflow and load-workflow functionality of modelscope/agentscope…
CVE-2024-8501 — High (CVSS 8.8): An arbitrary file download vulnerability exists in the rpc_agent_client component of modelscope/agentscope version…
CVE-2024-8524 — High (CVSS 7.5): A directory traversal vulnerability exists in modelscope/agentscope version 0.0.4. An attacker can exploit this…
CVE-2024-8438 — High (CVSS 7.5): A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint `/api/file` does not…

All CVEs affecting Modelscope Agentscope →

Other CWE-29 vulnerabilities

CVE-2025-15036 — Critical (CVSS 10.0): A path traversal vulnerability exists in the `extract_archive_to_dir` function within the…
CVE-2024-2083 — Critical (CVSS 9.9): A directory traversal vulnerability exists in the zenml-io/zenml repository, specifically within the /api/v1/steps…
CVE-2024-6396 — Critical (CVSS 9.8): A vulnerability in the `_backup_run` function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any…
CVE-2024-5443 — Critical (CVSS 9.8): CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the…
CVE-2024-2358 — Critical (CVSS 9.8): A path traversal vulnerability in the '/apply_settings' endpoint of parisneo/lollms-webui allows attackers to execute…
CVE-2023-6975 — Critical (CVSS 9.8): A malicious user could use this issue to get command execution on the vulnerable machine and get access to data &…

Browse all CWE-29 vulnerabilities →