The vulnerability is located in the _get_bytes_from_web_url function of the Internal Service module in modelscope agentscope, allowing an attacker to construct arbitrary URLs that the service will resolve. Such server-side request forgery can force the application to make originating requests to any target, potentially exposing internal resources or allowing data exfiltration. The impact is a loss of confidentiality, integrity, or availability of internal data depending on which URLs are targeted.

The affected product is modelscope agentscope, versions up to and including 1.0.18. No other versions are noted in the advisory.

The CVSS score is 6.9, indicating a medium severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. The attack can be initiated remotely with no authentication, and the exploit has already been released publicly, making it likely that attackers could use it once the host is discovered.