Vulnerabilities

TI-2026-79410 CVE-2026-97635 · GHSA-mw3v-p424-652w

Cross-site scripting in Agent Zero Web UI chat and uploads

LOW 37

The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.0026 Published 2026-10-22 Fixed in 1.15 CWE-79

TI-2026-23587 CVE-2026-30624 · GHSA-rppc-c4xv-v29h

MEDIUM 43

Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00405 Published 2026-04-15 No fix listed CWE-77

TI-2025-35030 CVE-2025-55524 · GHSA-549g-4gm4-jwrq

HIGH 71

Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00347 Published 2025-08-21 No fix listed CWE-732

TI-2025-35029 CVE-2025-55523 · GHSA-gxv2-p3q2-hmw6

MEDIUM 50

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.01117 Published 2025-08-21 No fix listed CWE-22

TI-2025-05576 CVE-2025-6166 · GHSA-42pf-4gfp-f2vq

LOW 24

A vulnerability was found in frdel Agent-Zero up to 0.8.4.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00551 Published 2025-06-17 Fixed in 0.8.4.1 CWE-22

TI-2025-03118 CVE-2025-3547 · GHSA-hqp5-f2jv-p5c2

LOW 25

A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00479 Published 2025-04-14 No fix listed CWE-22