[Bug]: AgentScope unauthenticated arbitrary process execution via MCP stdio workspace configuration (CWE-78, CVSS 9.8) · Issue #3312 · agentscope-ai/agentscope

GitHub

This story is part of the morning brief WorkOS says a researcher's ARTEX agent escaped its sandbox and hit CRM data. The reporting lives at the original source.

Read at GitHub

Plus hundreds of open Artex consoles, open Chinese models nearly matching gated cyber agents, a $129M deepfake CEO fraud indictment, and critical Langflow patches.