CVE-2026-97635: Agent Zero Web UI XSS
The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI session.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Agent Zero Web UI versions before 1.15 are affected. Deployments running version 1.15 or later are not identified as affected by the provided information.
What must happen for exploitation to succeed?
An attacker must provide malicious input through a chat message or file upload, and the content must later be reproduced in the chat interface. The JavaScript executes in the session of an authenticated user viewing that content.
Who is most at risk?
Authenticated Agent Zero Web UI users who view chat content or uploaded files that may have been supplied by an attacker are at risk. Successful exploitation can compromise confidentiality and integrity within that user's Web UI session.
What is the available remediation?
Upgrade the Agent Zero Web UI to version 1.15 or later. The affected range is explicitly limited to versions before 1.15.