---
id: CVE-2026-51851
title: >-
  modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory
  Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file
summary: >-
  modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory
  Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The
  save_text_file method accepts user-controlled file paths without normalization
  or valida…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: adp
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-04T01:02:37.987914Z'
exploitAvailable: true
published: '2026-10-29'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T01:04:32.476Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-51851'
references:
  - url: 'https://github.com/agent0ai/agent-zero/issues/1541'
  - url: 'https://gist.github.com/Ro1ME/a1bbf47465175e279a72121cd0df298b'
tags:
  - cve.org
  - exploit-available
epss: 0.00651
epssPercentile: 0.51454
ingestedAt: '2026-11-01T22:02:41.001Z'
---

## Overview

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.