CVE-2026-97635 Agent Zero CVE debrief

Who should care

Defenders responsible for Agent Zero Web UI deployments should assess exposure and prioritize upgrading to version 1.15 or later. Affected operators include those with Agent Zero Web UI deployments. Platforms include those hosting Agent Zero Web UI. Vulnerability management teams should prioritize verifying Agent Zero Web UI versions and upgrading to version 1.15 or later. Security teams should review chat messages and file uploads for potential XSS and 1

Why it matters

CVE-2026-97635 is a high-severity XSS vulnerability in the Agent Zero Web UI that allows for unauthorized actions within the application. Defenders responsible for Agent Zero Web UI deployments should assess exposure and prioritize upgrading to version 1.15 or later to prevent XSS attacks. The CVE record and source item provide details on affected versions and fixed versions.

• XSS attacks may lead to unauthorized actions within the Agent Zero Web UI
• Defenders must verify Agent Zero Web UI versions to determine exposure
• Upgrading to version 1.15 or later is necessary to prevent XSS attacks
• Additional security measures may be required to prevent future XSS attacks

Technical summary

The Agent Zero Web UI before version 1.15 does not correctly sanitize user-provided input in chat messages or file uploads, allowing for XSS attacks. This vulnerability allows for unauthorized actions within the application. Defenders should prioritize verifying Agent Zero Web UI versions and upgrading to version 1.15 or later. The vulnerability class is XSS, and the likely operational impact includes XSS attacks. Affected product context includes Agent Zero Web UI deployments. Defensive impact includes prioritizing verification of Agent Zero Web UI versions and upgrading to version 1.15 or later.

Defensive priority

Defenders should prioritize verifying Agent Zero Web UI versions and upgrading to version 1.15 or later.

Recommended defensive actions

• Verify Agent Zero Web UI versions and upgrade to version 1.15 or later
• Review chat messages and file uploads for potential XSS attacks
• Implement additional security measures to prevent XSS attacks
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the Agent Zero Web UI XSS vulnerability, including affected versions and fixed versions. The vulnerability allows for XSS attacks due to improper sanitization of user-provided input in chat messages or file uploads. Defenders should verify Agent Zero Web UI versions to determine exposure and prioritize upgrading to version 1.15 or later. Evidence of the vulnerability includes CVE-2026-97635, which is a high-severity XSS vulnerability. The source item and CVE record provide details on

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.