CVE-2026-2256NVD

Vulnerability Summary

A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.

Severity Level

MEDIUM(6.5)

Published Date

Mar 2, 2026

Last Modified

Mar 3, 2026

Exploitation Status

????

EPSS Score (30-Day)

2.31%Probability

Root Weakness (CWE)

CWE-77: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

ScopeUnchanged

ConfidentialityLow

IntegrityLow

AvailabilityNone

External References

https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC
https://github.com/modelscope/ms-agent
https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326
https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use
https://www.kb.cert.org/vuls/id/431821

Critical Alert 1 Active Exploit Detected Today

CVE Watchtower

CVE-2026-2256NVD

Vulnerability Summary

External References