Agent Zero

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Agent Zero records in CISA KEV

No Agent Zero vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2025-35030 CVE-2025-55524 · GHSA-549g-4gm4-jwrq

HIGH 71

Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00347 Published 2025-08-21 No fix listed CWE-732

TI-2025-35029 CVE-2025-55523 · GHSA-gxv2-p3q2-hmw6

MEDIUM 50

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.01117 Published 2025-08-21 No fix listed CWE-22

TI-2026-23587 CVE-2026-30624 · GHSA-rppc-c4xv-v29h

MEDIUM 43

Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00405 Published 2026-04-15 No fix listed CWE-77

TI-2026-79410 CVE-2026-97635 · GHSA-mw3v-p424-652w

LOW 37

The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.0026 Published 2026-10-22 Fixed in 1.15 CWE-79

TI-2025-03118 CVE-2025-3547 · GHSA-hqp5-f2jv-p5c2

LOW 25

A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00479 Published 2025-04-14 No fix listed CWE-22

TI-2025-05576 CVE-2025-6166 · GHSA-42pf-4gfp-f2vq

LOW 24

A vulnerability was found in frdel Agent-Zero up to 0.8.4.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00551 Published 2025-06-17 Fixed in 0.8.4.1 CWE-22