AG
Product
agent-zero
8
CVEs
0
On KEV
8.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 3Low 2
Watch
Add agent-zero to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30624 | 8.6 | Apr 15 | Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature Affected: 0.9.8 |
| CVE-2026-97635 New | 8.1 | Oct 22 | Agent Zero Web UI XSS Affected: before 1.15 |
| CVE-2025-55524 | 7.3 | Aug 21 | Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors Affected: 0.8 before 0.9.0 |
| CVE-2026-4308 | 6.3 | Mar 17 | frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery Affected: 0.9.7 |
| CVE-2025-3547 | 6.3 | Apr 14 | A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2 Affected: 0.8.1.2 |
| CVE-2026-4307 | 4.3 | Mar 17 | frdel/agent0ai agent-zero files.py get_abs_path path traversal Affected: 0.9.7-10 |
| CVE-2025-55523 | 3.5 | Aug 21 | An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal Affected: 0.8 through 0.9.4 |
| CVE-2025-6166 | 3.5 | Jun 17 | A vulnerability was found in frdel Agent-Zero up to 0.8.4 Affected: before 0.8.4.1 |
Showing 8