CyberRota Analysis
AI-GeneratedAgent-zero versions 1.7 through 1.10 are susceptible to a directory traversal vulnerability in the save_file_b64 method, which improperly handles user-controlled file paths. This flaw could allow an attacker to manipulate file paths and potentially access sensitive files on the server. Organizations using these versions should prioritize remediation to mitigate the risk of unauthorized file access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.