Vulnerabilidades de agent0ai (CVE)

Registros CVE publicados para agent0ai, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
6.1Media
CVE-2026-47119

Agent Zero < 1.15 Stored XSS via image_get API Endpoint

agent0ai agent-zero

Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Security-Policy, X-Cont…

4.3Media
CVE-2026-4307

frdel/agent0ai agent-zero files.py get_abs_path path traversal

frdel agent-zero; agent0ai agent-zero

A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has …