Medium severity · published Mar 17, 2026
CVE-2026-4307
frdel/agent0ai agent-zero files.py get_abs_path path traversal
4.3
CVSS
0.4%
EPSS
No
On KEV
Description
A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agent-zero · frdel
0.9.7-10 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4307
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4307
gist.github.com
https://gist.github.com/YLChen-007/1819c843ad26aaaaecdc768a789df022
vuldb.com
https://vuldb.com/?ctiid.351337
vuldb.com
https://vuldb.com/?id.351337
vuldb.com
https://vuldb.com/?submit.771967
More from agent-zero
8.6
CVE-2026-30624
Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature
8.1
CVE-2026-97635
Agent Zero Web UI XSS
7.3
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors
6.3
CVE-2026-4308
frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery
6.3
CVE-2025-3547
A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2