CVE

CVE-2025-55523

3.5

CVSSlow

Exploitable from an adjacent network · low-privilege account sufficient.

Description

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

Attack Vector

Adjacent

Privileges Req.

Low

User Interaction

None

Updated Sep 26, 2026View on NVD →

S4E scanner

CVE-2025-55523 Scanner

CVE-2025-55523 Scanner - Arbitrary File Download vulnerability in Agent-Zero

Used 3.3k times · 3.3k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.