84 matches found
PT-2026-25871
A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get abs path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be...
Agent Zero 路径遍历漏洞
Agent Zero is an artificial intelligence framework developed by Jan Tomášek. Version 0.9.7 of Agent Zero contains a path traversal vulnerability, which stems from incorrect handling of parameters in the file python/helpers/files.py, potentially leading to path traversal attacks...
CVE-2026-4307: Improper Limitation of a Pathname to a Restricted Directory
A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function getabspath of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be...
CVE-2026-4308: Server-Side Request Forgery (SSRF)
A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handlepdfdocument of the file python/helpers/documentquery.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available ...
VulnCheck KEV: CVE-2025-55523
An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...
EUVD-2025-28593
Malicious code in bioql PyPI...
EUVD-2025-18479
Malicious code in bioql PyPI...
EUVD-2025-10856
Malicious code in bioql PyPI...
EUVD-2025-28592
Malicious code in bioql PyPI...
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...
CVE-2025-55523
An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...
CVE-2025-55523
An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...
CVE-2025-55523
An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...
PT-2025-34265
Name of the Vulnerable Software and Affected Versions: Agent-Zero versions 0.8.0 through 0.8.9 Description: An issue exists in the /api/download work dir file.py component that allows attackers to execute a directory traversal. Recommendations: At the moment, there is no information about a newer...
Agent Zero 安全漏洞
Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A security vulnerability exists in Agent Zero version v0.8, which stems from a directory traversal vulnerability in the /api/downloadworkdirfile.py component...
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...
CVE-2025-55523
Agent-Zero versions 0.8.0 through 0.9.4 (specifically v0.8. *) are vulnerable to a path traversal (CWE-22) issue in the /api/download_work_dir_file.py component. This flaw is caused by improper validation , allowing an attacker to send a crafted request to access unauthorized files , potentially ...