CVE-2026-4308 PUBLISHED

frdel/agent0ai agent-zero document_query.py handle_pdf_document server-side request forgery

Assigner: VulDB
Reserved: 16.03.2026 Published: 17.03.2026 Updated: 17.03.2026

A weakness has been identified in frdel/agent0ai agent-zero 0.9.7. This affects the function handle_pdf_document of the file python/helpers/document_query.py. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor frdel
Product agent-zero
Versions
  • Version 0.9.7 is affected
Vendor agent0ai
Product agent-zero
Versions
  • Version 0.9.7 is affected

Credits

  • Eric-y (VulDB User) reporter
  • VulDB coordinator

References

Problem Types

  • Server-Side Request Forgery CWE