Evidence · DiggingBeagle record
Advisory: AgentScope unauthenticated MCP workspace registration spawns arbitrary stdio child process
AgentScope Service registered arbitrary stdio MCP configurations through its workspace API and connected immediately, spawning the supplied command before any meaningful authorization or protocol negotiation. CVE-2026-123022 describes unauthenticated exposure in default installations without a protecting gateway. The supplied X-User-ID header was not sufficient evidence of caller identity. No real-world breach was established. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
AgentScope Service registered arbitrary stdio MCP configurations through its workspace API and connected immediately, spawning the supplied command before any meaningful authorization or protocol negotiation. CVE-2026-123022 describes unauthenticated exposure in default installations without a protecting gateway. The supplied X-User-ID header was not sufficient evidence of caller identity. No real-world breach was established. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (2)
- supportsAgentScope MCP workspace registration spawned unchecked server commands: CVE-2026-123022 describes unauthenticated exposure in default installations without a protecting gateway. The supplied X-User-ID header was not sufficient evidence of caller identity. No real-world breach was established.
GHSA-m997-8g56-6phf; StdioMCPConfig.command and add_mcp path
- supportsAgentScope MCP workspace registration spawned unchecked server commands: AgentScope Service registered arbitrary stdio MCP configurations through its workspace API and connected immediately, spawning the supplied command before any meaningful authorization or protocol negotiation.
GHSA-m997-8g56-6phf; StdioMCPConfig.command and add_mcp path