CVE-2026-47119 is a stored cross-site scripting vulnerability in 3clyp50's agent-zero product affecting versions before 1.15. The vulnerability occurs because the image_get API endpoint serves SVG files without security headers that would prevent script execution. Attackers can exploit this by placing malicious SVG files containing JavaScript in any path readable by the agent-zero process. When an authenticated user is tricked into loading the SVG via the image_get endpoint, the embedded script executes in the user's browser context, allowing theft of csrf_token cookies and unauthorized API actions. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges required, and user interaction needed.

Successful exploitation allows attackers to execute arbitrary JavaScript in the context of the vulnerable application. This can lead to theft of csrf_token cookies and unauthorized API calls performed on behalf of authenticated users. The vulnerability compromises user session integrity and can facilitate further attacks leveraging the victim's privileges within the application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid placing untrusted SVG files in paths accessible by the agent-zero process and refrain from accessing the image_get endpoint with untrusted content. Implementing web server or proxy-level security headers such as Content-Security-Policy, X-Content-Type-Options, and Content-Disposition may help mitigate exploitation risk.