CVE-2026-6606: SSRF in ModelScope AgentScope Audio Processing

The National Vulnerability Database has detailed CVE-2026-6606, a high-severity Server-Side Request Forgery (SSRF) vulnerability impacting ModelScope AgentScope up to version 1.0.18. Specifically, the flaw resides within the _process_audio_block function in src/agentscope/agent/_agent_base.py, where manipulating the url argument can trigger an SSRF.

This vulnerability is remotely exploitable, meaning attackers don’t need direct network access to the target system. An exploit has been publicly released, significantly raising the risk profile for affected installations. The National Vulnerability Database notes that the vendor did not respond to early disclosure attempts, which is concerning for timely patching.

SSRF vulnerabilities allow attackers to compel the server-side application to make requests to an arbitrary domain of the attacker’s choosing. This can lead to unauthorized access to internal systems, port scanning of internal networks, and potential data exfiltration, effectively turning a public-facing application into a pivot point for broader network compromise.