CVE-2026-47118 is a path traversal vulnerability in 3clyp50's Agent Zero before version 1.15. The vulnerability arises because the image file serving endpoint disables path containment checks and relies solely on an extension allowlist, enabling attackers to supply crafted paths to read arbitrary files. The lack of path canonicalization allows symlink-based escapes, further expanding the scope of accessible files beyond the agent workspace to user home directories and mounted volumes. The vulnerability is exploitable without authentication and has a CVSS 4.0 base score of 7.1, indicating high severity.

An unauthenticated attacker can read arbitrary files on the system that the Agent Zero process has permission to access, including sensitive files outside the intended directory scope. This can lead to unauthorized disclosure of sensitive information. There is no indication of remote code execution or privilege escalation from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for suspicious requests targeting image file paths. Avoid exposing the service to untrusted networks if possible.