PT-2026-33072 · Unknown · Agent-Zero

Published 2026-04-15 · Updated 2026-04-16 · CVE-2026-30624

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Agent Zero version 0.9.8

Description The External MCP Servers configuration feature allows users to define MCP servers using a JSON configuration. The application executes the command and args values within this configuration without sufficient validation or restriction. This allows an attacker to supply a malicious configuration to execute arbitrary operating system commands with the privileges of the Agent Zero process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-30624

Affected Products

Agent-Zero

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-30624 · Security Note
• https://ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem · Note
• https://twitter.com/infoflowcloud/status/2044739736103747721 · Twitter Post
• https://twitter.com/CVEnew/status/2044738016757903437 · Twitter Post