CVE-2025-55524

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55524
Insecure permissions in Agent-Zero v0.8.* allow attackers to arbitrarily reset the system via unspecified vectors.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py Product
https://github.com/vityuasd/VulList/blob/main/vul_3.md Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*
History

08 Jan 2026, 14:22

Type Values Removed Values Added
First Time Agent-zero agent-zero
Agent-zero
CPE cpe:2.3:a:agent-zero:agent-zero:*:*:*:*:*:*:*:*
References () https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py - () https://github.com/frdel/agent-zero/blob/v0.8.7/python/api/restart.py - Product
References () https://github.com/vityuasd/VulList/blob/main/vul_3.md - () https://github.com/vityuasd/VulList/blob/main/vul_3.md - Exploit, Third Party Advisory

22 Aug 2025, 18:08

Type Values Removed Values Added
Summary
  • (es) Los permisos inseguros en Agent-Zero v0.8.* permiten a los atacantes restablecer el sistema arbitrariamente a través de vectores no especificados.

21 Aug 2025, 19:15

Type Values Removed Values Added
CWE CWE-732
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.3

21 Aug 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-21 18:15

Updated : 2026-01-08 14:22

NVD link : CVE-2025-55524

Mitre link : CVE-2025-55524

CVE.ORG link : CVE-2025-55524

JSON object : View

Products Affected

agent-zero

  • agent-zero
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource