Agent Zero vulnerabilities

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability. An attacker can place a crafted SVG file with JavaScript code in a path readable by the agent-zero process and then trick an authenticated user into visiting the image_get endpoint, causing the browser to execute the malicious script.

Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint. The security mechanism relies solely on an extension allowlist while path containment checking is explicitly disabled.