CVE-2026-51853: Agent Zero Agent Zero vulnerability

Published Sep 30, 2026

Updated

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.

Affected Software

1 affected component

Agent Zero Agent Zero=1.7, =1.8, =1.9, =1.10

Event History

Sep 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:17 PM

Description

Frequently Asked Questions

Which deployments are exposed?

Agent Zero versions 1.7, 1.8, 1.9, and 1.10 are identified as vulnerable. The affected FileBrowser initialization uses the host root directory as its workspace.

What access could this provide to an attacker?

The vulnerable FileBrowser class can allow the agent to access any file on the host system without restriction. The provided data does not specify any additional attacker prerequisites or authentication requirements.

Is a default configuration affected?

The available information identifies the FileBrowser initialization behavior but does not state whether it is enabled or reachable in a default deployment.

CVE-2026-51853: Agent Zero Agent Zero vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What access could this provide to an attacker?

Is a default configuration affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What access could this provide to an attacker?

Is a default configuration affected?