CVE-2026-4307General

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10. The impacted element is the function get_abs_path of the file python/helpers/files.py. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • 3 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-17: 3PoC Mentioned / Linked · 2026-03-17: 1Technical Details · 2026-03-17: 203-17
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets5 URLs
Full discourse3 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-4307 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4307 #CVE-2026-4307 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/kuoPW6uoyo

    Post summary

    The tweet announces CVE‑2026‑4307 with a medium severity rating but provides no details on exploitation, fixes or technical characteristics.

    0103099
    101 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4307 Path Traversal in Agent-Zero 0.9.7-10 Remote File Access V... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4307 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The tweet announces a Path Traversal vulnerability (CVE‑2026‑4307) in Agent‑Zero 0.9.7‑10, providing basic technical details but no PoC, exploit, patch information, or evidence of active exploitation.

    0000068
    4.0K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4307 - frdel/agent0ai agent-zero http://files.py get_abs_path path traversal Intel Report: https://ift.tt/WsluDtv

    Post summary

    The alert identifies CVE-2026-4307 as a path traversal vulnerability in frdel/agent0ai agent-zero, including a link that may host a PoC, but it does not indicate active exploitation, a patch, or detailed exploit code.

    0000094
    336 followersView on X

Explore more