Agent Zero CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Agent Zero CVE published 2026-10-22

CVE-2026-97635

The Agent Zero Web UI before version 1.15 is vulnerable to a high-severity XSS attack. This vulnerability allows for unauthorized actions within the application when user-provided input in chat messages or file uploads is not correctly sanitized. Defenders responsible for Agent Zero Web UI deployments should assess exposure and prioritize upgrading to version 1.15 or later to prevent XSS attacks. The CVE [truncated]