Path Traversal Vulnerability in frdel Agent-Zero by frdel
CVE-2025-3547

5.3MEDIUM

Key Information:

Vendor

Frdel

Status
Agent-zero
Vendor
CVE Published:
14 April 2025

What is CVE-2025-3547?

A vulnerability exists in frdel Agent-Zero version 0.8.1.2 that allows for path traversal due to improper handling of the argument path in the /get_work_dir_files file. This flaw enables remote attackers to manipulate file paths, potentially exposing sensitive files and data. Given the disclosure of the exploit to the public, it is crucial for users to implement necessary security measures to safeguard their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Agent-Zero 0.8.1.2

References

https://vuldb.com/?id.304588
vdb-entrytechnical-description
https://vuldb.com/?ctiid.304588
signaturepermissions-required
https://vuldb.com/?submit.546220
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ekkoo (VulDB User)
JSON
.