Medium severity · published Mar 17, 2026
CVE-2026-4308
frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery
6.3
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle_pdf_document of the file python/helpers/document_query.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agent-zero · frdel
0.9.7 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-4308
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-4308
gist.github.com
https://gist.github.com/YLChen-007/c99c44aa019266a72636757308d43989
gist.github.com
https://gist.github.com/YLChen-007/c99c44aa019266a72636757308d43989#poc
vuldb.com
https://vuldb.com/?ctiid.351338
vuldb.com
https://vuldb.com/?id.351338
vuldb.com
https://vuldb.com/?submit.773950
More from agent-zero
8.6
CVE-2026-30624
Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature
8.1
CVE-2026-97635
Agent Zero Web UI XSS
7.3
CVE-2025-55524
Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors
6.3
CVE-2025-3547
frdel Agent-Zero get_work_dir_files path traversal
4.3
CVE-2026-4307
frdel/agent0ai agent-zero files.py get_abs_path path traversal