What’s Vulnerable › Vulnerabilities

CVE-2026-47118: Agent Zero < 1.15 Path Traversal File Read via image_get API

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-10-26
• Weakness: CWE-22

Description

Agent Zero before version 1.15 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying crafted paths to the image file serving endpoint, which relies solely on an extension allowlist while the path containment check is explicitly disabled. Attackers can request any file with an image extension readable by the process, including files outside the agent workspace, user home directories, and mounted volumes, and can also leverage symlink-based escapes due to the lack of path canonicalization in the path resolution logic.

Affected products

• 3clyp50 agent-zero: before 1.15 — fixed in 1.15

How to fix

Upgrade to a fixed version: 3clyp50 agent-zero 1.15. Check the vendor advisory for mitigations.

References

• https://github.com/3clyp50/agent-zero/commit/1f2d5122265282d6b98bc36ee8f9d0f8ab76db9e
• https://github.com/agent0ai/agent-zero/issues/1609
• https://www.vulncheck.com/advisories/agent-zero-path-traversal-file-read-via-image-get-api

Get alerted when CVE-2026-47118 or the next vulnerability affects your stack