CVE-2026-51852
UnknownSummary
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.
Risk Assessment
An attacker could write files outside the intended directory, potentially overwriting critical system files or achieving remote code execution. Organizations using agent-zero are at risk of full system compromise.
Recommendation
Upgrade agent-zero to a version newer than 1.10 that includes path validation fixes. If upgrade is not possible, restrict access to the FileBrowser interface and monitor for unusual file operations.
Other vulnerabilities in agent-zero
See all- CVE-2026-51853Unknown
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.
- CVE-2026-47119Medium
Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability. An attacker can place a crafted SVG file with JavaScript code in a path readable by the agent-zero process and then trick an authenticated user into visiting the image_get endpoint, causing the browser to execute the malicious script.
- CVE-2026-47118Medium
Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint. The security mechanism relies solely on an extension allowlist while path containment checking is explicitly disabled.
Original NVD description (English source)
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS