Read the docs
TI-2026-34711 Aliases CVE-2026-47119GHSA-9pw8-7895-6wxc

Agent Zero < 1.15 Stored XSS via image_get API Endpoint

Priority LOW 24CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Security-Policy, X-Content-Type-Options, or Content-Disposition headers. Attackers can place a crafted SVG file containing script tags in any path readable by the agent-zero process and lure an authenticated user to the image_get endpoint, causing the browser to execute the malicious script, steal the csrf_token cookie, and perform unauthorized API calls on behalf of the victim.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00236 14th percentileScored 2026-11-07
Fix Fixed agent-zero (agent0ai): 1.15

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
agent0aiagent-zerobefore 1.151.15Patch availableCNA
  • agent-zero Vendoragent0ai Affected before 1.15 Fixed in 1.15 Patch available CNA

Remediation

  • Fix · CNA agent-zero (agent0ai) Fixed in 1.15

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-47119
  2. 2026-10-03 Alias added: GHSA-9pw8-7895-6wxc
  3. 2026-10-29 Fix available: agent0ai/[email protected] · CNA

References

Patch 1

Other 1

  • TI-2026-03751 frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery CVSS 4.0MEDIUM 5.3
  • TI-2026-03750 frdel/agent0ai agent-zero files.py get_abs_path path traversal CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences