agent0ai agent-zero Schwachstellen (CVE)

Für agent0ai agent-zero veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
6.1Mittel
CVE-2026-47119

Agent Zero < 1.15 Stored XSS via image_get API Endpoint

agent0ai agent-zero

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Security-Policy, X-Cont…

4.3Mittel
CVE-2026-4307

frdel/agent0ai agent-zero files.py get_abs_path path traversal

frdel agent-zero; agent0ai agent-zero

A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has …