GCVE - cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Agent Zero (`bfddae17-0b56-56d5-9dd0-e3221d3af75c`)
Product	Agent Zero (`0868e1fe-73ab-5414-9b47-e5a78972165e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-4308`	vulnerable	2026-06-08 08:05:13.165168	frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery MEDIUM (6.3) A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle_pdf_document of the file python/helpers/document_query.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-17T04:02:07.980Z Updated: 2026-03-17T13:22:56.803Z Open on db.gcve.eu Reference links https://vuldb.com/?id.351338 https://vuldb.com/?ctiid.351338 https://vuldb.com/?submit.773950 https://gist.github.com/YLChen-007/c99c44aa019266a72636757308d43989 https://gist.github.com/YLChen-007/c99c44aa019266a72636757308d43989#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4307`	vulnerable	2026-06-08 08:05:13.164625	frdel/agent0ai agent-zero files.py get_abs_path path traversal MEDIUM (4.3) A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-17T03:32:07.609Z Updated: 2026-03-17T13:25:49.019Z Open on db.gcve.eu Reference links https://vuldb.com/?id.351337 https://vuldb.com/?ctiid.351337 https://vuldb.com/?submit.771967 https://gist.github.com/YLChen-007/1819c843ad26aaaaecdc768a789df022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6166`	vulnerable	2026-06-08 07:43:14.459997	frdel Agent-Zero image_get.py image_get path traversal LOW (3.5) A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the function image_get of the file /python/api/image_get.py. The manipulation of the argument path leads to path traversal. Upgrading to version 0.8.4.1 is able to address this issue. The identifier of the patch is 5db74202d632306a883ccce7339c5bdba0d16c5a. It is recommended to upgrade the affected component. Published: 2025-06-17T06:00:19.953Z Updated: 2025-06-17T13:32:35.728Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312641 https://vuldb.com/?ctiid.312641 https://vuldb.com/?submit.593611 https://github.com/frdel/agent-zero/issues/383 https://github.com/frdel/agent-zero/issues/383#issuecomment-2893239897	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55524`	vulnerable	2026-06-08 07:33:15.016603	Details available Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors. Published: 2025-08-21T00:00:00.000Z Updated: 2025-08-21T18:07:35.541Z Open on db.gcve.eu Reference links https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py https://github.com/vityuasd/VulList/blob/main/vul_3.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55523`	vulnerable	2026-06-08 07:33:15.016239	Details available An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal. Published: 2025-08-21T00:00:00.000Z Updated: 2025-08-21T19:20:29.269Z Open on db.gcve.eu Reference links https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/download_work_dir_file.py https://www.cve.org/CVERecord?id=CVE-2025-6166 https://github.com/agent0ai/agent-zero/issues/687	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.