CVE-2026-2256

Medium CVSS: 6.5

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

Vendor

Product

CWE

CWE-77

Yayın Tarihi

2026-03-02 21:16:27

Güncelleme

2026-03-03 21:52:29

Source Identifier

cret@cert.org

KEV Date Added

Kategoriler

CWE-77 MEDIUM 2026

Referanslar

https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC https://github.com/modelscope/ms-agent https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326 https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use https://www.kb.cert.org/vuls/id/431821