What is GHSA-j6rq-qhh6-gpf5?

GHSA-j6rq-qhh6-gpf5 is a security advisory published by GitHub Security Advisories with High severity. agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...

Which CVE IDs does GHSA-j6rq-qhh6-gpf5 cover?

GHSA-j6rq-qhh6-gpf5 covers the following CVE IDs: CVE-2026-51853. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j6rq-qhh6-gpf5?

GHSA-j6rq-qhh6-gpf5 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-j6rq-qhh6-gpf5HighCVSS 7.5

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...

Vendor

GitHub Security Advisories

Published

September 30, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-51853 →

📋 Description

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51853
https://github.com/agent0ai/agent-zero/issues/1539
https://gist.github.com/Ro1ME/4fe09fc7f94c9c0b10c8b6198a70e920
https://github.com/advisories/GHSA-j6rq-qhh6-gpf5