CVE-2026-51853
UnknownSummary
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.
Risk Assessment
The agent can read or modify any file on the system, leading to a serious breach of confidentiality and integrity. The risk includes data leakage and potential further privilege escalation.
Recommendation
Upgrade agent-zero to a version containing the fix and restrict the FileBrowser workspace to a dedicated directory. Apply the principle of least privilege for the agent process.
Other vulnerabilities in agent-zero
See all- CVE-2026-51852Unknown
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.
- CVE-2026-47119Medium
Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability. An attacker can place a crafted SVG file with JavaScript code in a path readable by the agent-zero process and then trick an authenticated user into visiting the image_get endpoint, causing the browser to execute the malicious script.
- CVE-2026-47118Medium
Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint. The security mechanism relies solely on an extension allowlist while path containment checking is explicitly disabled.
Original NVD description (English source)
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS