{"id":"CVE-2026-51851","published":"2026-10-29T18:17:32.153","lastModified":"2026-10-29T18:17:32.153","description":"modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/a1bbf47465175e279a72121cd0df298b","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1541","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/a1bbf47465175e279a72121cd0df298b","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1541","tags":[]}],"hasPoc":true,"ai":null}