CVE-2026-51853

Deferred Deferred - Pending Action

Directory Traversal Vulnerability in agent-zero

Publication date: 2026-09-30

Last updated on: 2026-10-01

Assigner: MITRE

Description

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-10-01

Generated

2026-10-19

AI Q&A

2026-10-01

EPSS Evaluated

2026-10-18

NVD

CVE-2026-51853

Affected Vendors & Products

Vendor	Product	Version / Range
agent-zero	agent-zero	1.7
agent-zero	agent-zero	1.8
agent-zero	agent-zero	1.9
agent-zero	agent-zero	1.10

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

The vulnerability in agent-zero versions 1.7 to 1.10 allows a Directory Traversal attack through the FileBrowser class in python/helpers/file_browser.py. The FileBrowser class initializes with the host root directory as the workspace, enabling the agent to access any file on the system without restrictions.

Detection Guidance

To detect this vulnerability, check if agent-zero versions 1.7, 1.8, 1.9, or 1.10 are installed. Inspect the python/helpers/file_browser.py file for the FileBrowser class initialization. Verify if the workspace parameter allows unrestricted file system access.

Impact Analysis

This vulnerability could allow an attacker to read, modify, or delete any file on the system where agent-zero is running. Sensitive data like configuration files, user credentials, or other confidential information could be exposed or manipulated.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations by exposing personal or sensitive data. Organizations may face legal penalties, data breach notifications, and reputational damage if such vulnerabilities are exploited.

Mitigation Strategies

Immediately upgrade agent-zero to a patched version if available. If not, restrict file system access permissions for the agent process and review all file browser operations to ensure workspace root directories are properly validated.

Hi! I’m here to help you understand CVE-2026-51853. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70