The vulnerability arises from a directory traversal flaw in the FileBrowser class of agent-zero (versions 1.7–1.10). The class sets the host's root directory as the workspace without validating paths, allowing the agent to read or write any file on the system. This flaw effectively provides unrestricted file‑system access and can lead to data disclosure. Based on the description, it is inferred that code execution could be achieved if the agent runs with elevated privileges, but the vulnerability description does not explicitly confirm that; it merely indicates full file‑system access.

Agent-zero versions 1.7, 1.8, 1.9, and 1.10 are affected. The flaw exists in the python/helpers/file_browser.py module and applies to any host operating system because the code does not impose a restricted working directory. All deployments of these releases are potentially vulnerable.

The EPSS score indicates a very low but nonzero probability of exploitation (<1%), and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 7.5 classifies it as high severity, reflecting the potential for full file‑system compromise. Exploitation would require an attacker to influence the agent’s configuration or otherwise trigger the FileBrowser component locally; based on the description, it is inferred that the attacker would need local or privileged access to supply a malicious path.