Submit #593611: frdel agent-zero <0.8.4.1 Arbitrary File Readinfo

Titelfrdel agent-zero <0.8.4.1 Arbitrary File Read
Beschreibungagent-zero does not perform additional validation on the passed path parameters when processing the `/image_get ` route, resulting in arbitrary file read.
Quelle⚠️ https://github.com/frdel/agent-zero/issues/383
Benutzer
 Anonymous User
Einreichung10.06.2025 03:51 (vor 10 Monaten)
Moderieren15.06.2025 21:12 (6 days later)
StatusAkzeptiert
VulDB Eintrag312641 [frdel Agent-Zero bis 0.8.4 /python/api/image_get.py image_get path Directory Traversal]
Punkte16

Want to know what is going to be exploited?

We predict KEV entries!