CVE-2026-51852
— UNSCOREDpublic exploit availablePublished 2026-09-30 · Updated 2026-10-01
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.