#CVE-2026-123023

AgentScope agent service has no login check: three CVEs published, two still unpatched

Anyone who can reach an AgentScope 2.0 agent service can act as any user and make it run programs. Two of three new CVEs have no fix yet; keep it off networks.