Agent-Zero

5 CVEs across 1 Agent-Zero products. Browse Agent-Zero vulnerabilities, severities, and proof-of-concept exploits.

Agent-Zero products with known CVEs

ProductCVEs
Agent-Zero5
Agent-Zero CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-30624High8.62026-04-15Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature. The application allows users to define MCP s…
CVE-2025-55524High7.32025-08-21Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.
CVE-2025-55523Low3.52025-08-21An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.
CVE-2025-6166Low3.52025-06-17A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the function image_get of the file /python/api/…
CVE-2025-3547Medium6.32025-04-14A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2. This vulnerability affects unknown code of the file /get_work_dir_files. The mani…