CVE-2026-51853

Versions 1.7, 1.8, 1.9, and 1.10 of agent-zero are vulnerable to a Directory Traversal flaw located in python/helpers/file_browser.py within the FileBrowser.__init__ method. The root cause is that the FileBrowser class initializes with the host root directory as the workspace, which allows an age...