AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skill_path request parameter to copy files into the skills directory, making them accessible through the workspace skill listing.

AgentScope versions through 2.0.7.post1 contain a path traversal vulnerability in the LocalWorkspace.add_skill function. The vulnerability arises from an unconfined source path parameter (skill_path) that allows attackers to copy arbitrary server directories into the agent workspace. By supplying a malicious directory path in the skill_path request parameter, an attacker can copy sensitive files into the skills directory. These copied files then become accessible through the workspace skill listing interface. This could lead to unauthorized disclosure of sensitive server files and data. The vulnerability is tracked as CVE-2026-85685 and affects the _local_workspace.py module. No patch version beyond 2.0.7.post1 has been referenced in the advisory.