GHSA-j9rw-qm5f-r8xm — AgentScope path traversal vulnerability in save-workflow
A path traversal vulnerability exists in the save-workflow and load-workflow functionality of AgentScope versions prior to the fix. It allows an attacker to read and write arbitrary JSON files on the filesystem and may expose or modify sensitive information such as configuration files, API keys, and hardcoded passwords.
CERT24