CVE-2024-48050

Summary

CVE-2024-48050 is a vulnerability affecting agentscope versions prior to v0.0.5. The issue lies within the file "workstation/workflow_utils.py" and specifically the function "is_callable_expression." This function, found on line result = eval(s), poses a significant security risk as it allows for the direct execution of user-supplied commands, making it essential for users to upgrade to the latest version of agentscope to mitigate this potential threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.