CVE-2025-55523

Impact

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/agent0ai/agent-zero/issues/687
• https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/download_work_dir_file.py
• https://www.cve.org/CVERecord?id=CVE-2025-6166