CVE-2026-123024 | agentscope-ai AgentScope up to 2.0.11 Agent Service deps.py get_current_user_id X-User-ID missing authentication (Issue 3314)

November 5, 2026 Yanac

A vulnerability classified as critical was found in agentscope-ai AgentScope up to 2.0.11. This impacts the function get_current_user_id of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication.

This vulnerability is documented as CVE-2026-123024. The attack can be executed remotely. Additionally, an exploit exists.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More