CVE-2025-55523

Description

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

PUBLISHED Reserved 2025-08-13 | Published 2025-08-21 | Updated 2025-08-21 | Assigner mitre

References

github.com/...ob/v0.8.7/python/api/download_work_dir_file.py

www.cve.org/CVERecord?id=CVE-2025-6166

github.com/agent0ai/agent-zero/issues/687

cve.org (CVE-2025-55523)

nvd.nist.gov (CVE-2025-55523)

Download JSON