PT-2026-44006 · 3Clyp50+1 · Agent-Zero

Yu Sun · CVE-2026-47119 · Published 2026-05-27 · Updated 2026-05-27

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Agent Zero versions prior to 1.15

Description A stored cross-site scripting issue exists where attackers can execute arbitrary JavaScript within the application origin. This occurs when SVG files are served through the 'image get' API endpoint without Content-Security-Policy, X-Content-Type-Options, or Content-Disposition headers. An attacker can place a crafted SVG file containing script tags in a path readable by the agent-zero process and lure an authenticated user to the 'image get' endpoint. This allows the browser to execute the malicious script, steal the csrf token cookie, and perform unauthorized API calls on behalf of the victim.

Recommendations Update Agent Zero to version 1.15 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-47119

Affected Products

Agent-Zero

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47119.json · Exploit
• https://github.com/3clyp50/agent-zero/commit/1f2d5122265282d6b98bc36ee8f9d0f8ab76db9e · Patch
• https://osv.dev/vulnerability/CVE-2026-47119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47119 · Security Note
• https://github.com/agent0ai/agent-zero/issues/1609 · Note
• https://github.com/3clyp50/agent-zero · Note
• https://vulncheck.com/advisories/agent-zero-stored-xss-via-image-get-api-endpoint · Note