modelscope agent-zero versions 1.7, 1.8, 1.9, and 1.10 contain a directory traversal vulnerability in the save_text_file method of python/helpers/file_browser.py. This method improperly handles user-supplied file paths without normalization or validation, enabling attackers to write files outside the intended directory.