Yüksek CVSS 7.5
CVE-2026-51852: CVE-2026-51852: dizin geçişi
Açıklama (NVD)
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.
Özet bilgiler
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,77 (yüzdelik 56)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor