Agent Zero code issue vulnerabilities

Agent Zero is an artificial intelligence framework developed by Jan Tomášek himself. Version 0.9.7 of Agent Zero contains a code vulnerability caused by incorrect handling of parameters in the file python/helpers/documentquery.py. This vulnerability could lead to server-side request forgery...

Agent Zero path traversal vulnerability

Agent Zero is an artificial intelligence framework developed by Jan Tomášek. Version 0.9.7 of Agent Zero contains a path traversal vulnerability, which stems from incorrect handling of parameters in the file python/helpers/files.py, potentially leading to path traversal attacks...

PT-2026-25872

🚨 CVE-2026-4308 A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle pdf document of the file python/helpers/document query.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-4307: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function getabspath of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be...

CVE-2026-4308: Server-Side Request Forgery (SSRF)

A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handlepdfdocument of the file python/helpers/documentquery.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available ...

VulnCheck KEV: CVE-2025-55523

An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...

EUVD-2025-10856

Malicious code in bioql PyPI...

EUVD-2025-18479

Malicious code in bioql PyPI...

EUVD-2025-28593

Malicious code in bioql PyPI...

EUVD-2025-28592

Malicious code in bioql PyPI...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55523

An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55523

An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

Agent Zero security vulnerability

Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A security vulnerability exists in Agent Zero version v0.8, which stems from a directory traversal vulnerability in the /api/downloadworkdirfile.py component...

CVE-2025-55523

An issue in the component /api/downloadworkdirfile.py of Agent-Zero v0.8. allows attackers to execute a directory traversal...

CVE-2025-55524

Insecure permissions in Agent-Zero v0.8. allow attackers to arbitrarily reset the system via unspecified vectors...

CVE-2025-55524

The artificial intelligence framework Agent-Zero (versions 0.8.0 through 0.8.9 ) is affected by CVE-2025-55524 . The vulnerability is caused by incorrect permission assignment for critical resources, which allows an attacker to arbitrarily reset the system via unspecified vectors. While the speci...

CVE-2025-55523

Agent-Zero versions v0.8.0 through v0.9.4 (specifically identified as v0.8.0 - v0.8.9 in some records) are vulnerable to a path traversal vulnerability (CWE-22) in the /api/download_work_dir_file.py component. Due to improper validation, an attacker can provide a crafted request to access unautho...