CVE-2026-51853: Path Traversal
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Agent Zero versions 1.7, 1.8, 1.9, and 1.10 are identified as vulnerable. The affected FileBrowser initialization uses the host root directory as its workspace.
What access could this provide to an attacker?
The vulnerable FileBrowser class can allow the agent to access any file on the host system without restriction. The provided data does not specify any additional attacker prerequisites or authentication requirements.
Is a default configuration affected?
The available information identifies the FileBrowser initialization behavior but does not state whether it is enabled or reachable in a default deployment.