All 6 CVE vulnerabilities found in Agent-Zero, with AI-generated Chinese analysis, references, and POCs.
Vendor: frdel
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-47119 | Agent Zero < 1.15 Stored XSS via image_get API Endpoint CWE-79 | 6.1 | Medium | 2026-05-27 |
| CVE-2026-47118 | Agent Zero < 1.15 Path Traversal File Read via image_get API CWE-22 | 6.5 | Medium | 2026-05-27 |
| CVE-2026-4308 | frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery CWE-918 | 6.3 | Medium | 2026-03-17 |
| CVE-2026-4307 | frdel/agent0ai agent-zero files.py get_abs_path path traversal CWE-22 | 4.3 | Medium | 2026-03-17 |
| CVE-2025-6166 | frdel Agent-Zero image_get.py image_get path traversal CWE-22 | 3.5 | Low | 2025-06-17 |
| CVE-2025-3547 | frdel Agent-Zero get_work_dir_files path traversal CWE-22 | 6.3 | Medium | 2025-04-14 |
All 6 known CVE vulnerabilities affecting Agent-Zero with full Chinese analysis, references, and POCs where available.