EUVD-2026-113288

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savetextfile. The savetextfile method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...

CVE-2026-51851

The software modelscope agent-zero versions 1.7, 1.8, 1.9, and 1.10 is vulnerable to a Directory Traversal vulnerability in the python/helpers/file_browser.py:FileBrowser.save_text_file method. The root cause is that the method accepts user-controlled file paths without performing any normalizati...