CVE-2026-47119
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
61/100
Published: 2026-05-27
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
Passive
AT:
None
VC:
None
VI:
None
VA:
None
Description
Agent Zero before version 1.15 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript in the application origin by serving SVG files through the image_get API endpoint without Content-Security-Policy, X-Content-Type-Options, or Content-Disposition headers. Attackers can place a crafted SVG file containing script tags in any path readable by the agent-zero process and lure an authenticated user to the image_get endpoint, causing the browser to execute the malicious script, steal the csrf_token cookie, and perform unauthorized API calls on behalf of the victim.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| agent0ai | agent-zero | 0 < 1.15 |
| agent0ai | agent-zero | 0 < 1.15 |