{"id":"CVE-2026-51853","published":"2026-09-30T21:17:11.400","lastModified":"2026-10-01T19:17:20.613","description":"agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/4fe09fc7f94c9c0b10c8b6198a70e920","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1539","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1539","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/4fe09fc7f94c9c0b10c8b6198a70e920","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1539","tags":[]},{"url":"https://github.com/agent0ai/agent-zero/issues/1539","tags":[]}],"hasPoc":true,"ai":{"summary":"The agent-zero application suffers from a directory traversal vulnerability that allows unauthorized access to any file on the system through the FileBrowser component. This flaw enables attackers to read sensitive files without authentication or authorization.","exploitability":"Exploitation is straightforward with no special preconditions required, as the vulnerability exists in the default configuration and allows unrestricted file access.","blast_radius":"The impact could be significant as attackers can potentially access configuration files, credentials, logs, and other sensitive system files that may contain authentication tokens, API keys, or database connection details.","remediation":"Upgrade to agent-zero version 1.11 or later which includes the fix for the directory traversal vulnerability in python/helpers/file_browser.py.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["directory-traversal","file-access","unauthenticated-access"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:06:59.963Z"}}