CyberRota Analysis
AI-GeneratedThe Directory Traversal vulnerability in agent-zero versions 1.7 to 1.10 allows unauthorized access to any file on the system due to improper handling of the host root directory in the FileBrowser class. This could lead to exposure of sensitive information or unauthorized manipulation of files. Organizations using affected versions should prioritize remediation to mitigate potential data breaches and system integrity risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.