{"id":"CVE-2026-2256","aliases":["GHSA-4gc2-344q-r2rw","PYSEC-2026-2668"],"title":"MS-Agent vulnerable to Command Injection","summary":"MS-Agent vulnerable to Command Injection","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","vendor":"ms-agent","product":"ms-agent","ecosystem":"pip","affected":["ms-agent <= 1.6.0rc1"],"published":"2026-03-02","updated":"2026-07-13","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-4gc2-344q-r2rw","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2256"},{"url":"https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC"},{"url":"https://github.com/modelscope/ms-agent"},{"url":"https://medium.com/@itamar.yochpaz/cve-2026-2256-from-ai-prompt-to-full-system-compromise-a4114c718326"},{"url":"https://www.hiddenlayer.com/research/indirect-prompt-injection-of-claude-computer-use"},{"url":"https://www.kb.cert.org/vuls/id/431821"}],"tags":["osv","pip","exploit-available"],"epss":0.01611,"epssPercentile":0.74462,"ingestedAt":"2026-07-13T18:57:52.605Z","exploits":{"github":3,"githubRepos":["https://github.com/Itamar-Yochpaz/CVE-2026-2256-PoC","https://github.com/melbratic/CVE-2026-2256-Threat-Model----ms-agent-Command-Injection","https://github.com/mruniversity/CVE-2026-2256-"],"checkedAt":"2026-09-21T15:28:28.742Z"},"exploitAvailable":true,"slug":"CVE-2026-2256","body":"## Overview\n\nA Command Injection vulnerability in ModelScope's MS-Agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.\n\n## Affected packages\n\n- `ms-agent <= 1.6.0rc1`\n\n## Remediation\n\nRefer to the advisory for the patched release.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[{"seq":5011,"id":"CVE-2026-2256","ts":1788887228168,"field":"exploit_available","old":"false","new":"true"},{"seq":3894,"id":"CVE-2026-2256","ts":1788886359163,"field":"exploit_available","old":"true","new":"false"},{"seq":2716,"id":"CVE-2026-2256","ts":1788883024847,"field":"exploit_available","old":"false","new":"true"},{"seq":1745,"id":"CVE-2026-2256","ts":1788882428836,"field":"exploit_available","old":"true","new":"false"},{"seq":851,"id":"CVE-2026-2256","ts":1788881862104,"field":"exploit_available","old":"false","new":"true"}]}