CVE-2026-51856Published
In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python code in the service environment. In the …
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-51856 · Microsoft / collected KEV context
cve-program · CVE-2026-51856
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.