CVE-2026-51851

The software modelscope agent-zero versions 1.7, 1.8, 1.9, and 1.10 is vulnerable to a Directory Traversal vulnerability in the python/helpers/file_browser.py:FileBrowser.save_text_file method. The root cause is that the method accepts user-controlled file paths without performing any normalizati...