CVE-2025-55523: Agent-Zero

Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* allows attackers to execute a directory traversal.

Affected products

• Agent-Zero Agent-Zero: from 0.8, up to and including 0.9.4

Published 2025-08-21. Last modified 2026-06-17.