Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 01 Oct 2026 00:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Directory Traversal in agent‑zero FileBrowser.save_file_b64 Allows Arbitrary File Write |
Wed, 30 Sep 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks. | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-09-30T20:49:56.181Z
Reserved: 2026-06-08T00:00:00.000Z
Link: CVE-2026-51852
No data.
Status : Received
Published: 2026-09-30T21:17:11.273
Modified: 2026-09-30T21:17:11.273
Link: CVE-2026-51852
No data.
OpenCVE Enrichment
Updated: 2026-10-01T00:00:12Z
No weakness.
