CVE-2026-97635

HIGH 8.1

Agent Zero Web UI XSS

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI session.

CWE	CWE-79
Vendor	agent zero
Product	agent zero
Published	Oct 22, 2026

Stay Ahead of the Next One

Get instant alerts for agent zero agent zero

Be the first to know when new high vulnerabilities affecting agent zero agent zero are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

Agent Zero / Agent Zero

0 < 1.15

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/agent0ai/agent-zero/releases/tag/v1.15 github.com: https://github.com/agent0ai/agent-zero/issues/943 cve.org: https://www.cve.org/CVERecord?id=CVE-2026-97635 raw.githubusercontent.com: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-296-01.json

Credits

Joshua Wells, Vexel Foundation Muhammad Ali, Vexel Foundation