Cyber Resilience

CVE-2024-8550

HighPublic PoC

Published: 10 February 2025

Published
10 February 2025
Modified
30 July 2025
KEV Added
—
Patch
—
CVSS Score v3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0028 51.5th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-8550 is a high-severity Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) vulnerability in Modelscope Agentscope. Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique File and Directory Discovery (T1083); ranked in the top 48.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability details

A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The…

more

issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outside the intended directory.

CWE(s)
CWE-497

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1083 File and Directory Discovery Discovery
Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
attack.mitre.org →
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1552.001 Credentials In Files Credential Access
Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials.
attack.mitre.org →
Why these techniques?

The LFI vulnerability (CVE-2024-8550) enables exploitation of a public-facing application (T1190), arbitrary file reads for file and directory discovery (T1083), and access to sensitive files like API keys constituting unsecured credentials in files (T1552.001).

Affected Assets

modelscope
agentscope
0.0.4

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AC-22 Publicly Accessible Content
addresses: CWE-497

Ongoing reviews detect and remove sensitive system information before it reaches publicly accessible systems.

AC-23 Data Mining Protection
addresses: CWE-497

Employs detection to prevent unauthorized mining of sensitive system information from being exfiltrated to external control spheres.

CM-12 Information Location
addresses: CWE-497

Documenting where system information is processed and stored prevents exposure to unauthorized control spheres.

PE-19 Information Leakage
addresses: CWE-497

The control stops sensitive system information from crossing into unauthorized control spheres through EM emanations.

PM-25 Minimization of Personally Identifiable Information Used in Testing, Training, and Research
addresses: CWE-497

Authorization and minimization requirements keep PII out of test/research control spheres that often lack production-grade protections.

RA-2 Security Categorization
addresses: CWE-497

Documented categorization of system information reduces the chance that sensitive internals are left exposed to unauthorized spheres.

SC-30 Concealment and Misdirection
addresses: CWE-497

System information is concealed or replaced with decoys, reducing leakage to unauthorized observers.

SI-11 Error Handling
addresses: CWE-497

Ensures sensitive system information is not disclosed outside the intended control sphere through error output.

References