CVE-2025-6166: Path Traversal in Agent-Zero

The Path Traversal vulnerability in Agent-Zero allows an attacker to bypass intended access controls and read arbitrary files on the system where Agent-Zero is running. By crafting a malicious request that manipulates the 'path' parameter in the /python/api/image_get.py endpoint, an attacker could potentially retrieve configuration files, source code, or other sensitive data. The extent of the data accessible depends on the permissions of the Agent-Zero process and the file system structure. While the CVSS score is LOW, successful exploitation could lead to information disclosure and compromise system confidentiality.

1. Reserved2025-06-15
2. Published2025-06-17
3. EPSS updated2026-03-23

The primary mitigation for CVE-2025-6166 is to upgrade Agent-Zero to version 0.8.4.1 or later, which includes the fix. If an immediate upgrade is not feasible, consider implementing input validation on the 'path' parameter within the /python/api/imageget.py endpoint to prevent path traversal attempts. This could involve whitelisting allowed characters or restricting the path to a specific directory. Additionally, review file system permissions to ensure that the Agent-Zero process has only the necessary access rights. After upgrading, confirm the fix by attempting to access a restricted file via the /python/api/imageget.py endpoint with a crafted path traversal payload; access should be denied.