Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature. The application allows users to define MCP servers using a JSON configuration containing arbitrary command and args values. These values are executed by the application when the configuration is applied without sufficient validation or restriction. An attacker may supply a malicious MCP configuration to execute arbitrary operating system commands, potentially resulting in remote code execution with the privileges of the Agent Zero process.
| Vendor | Product | Versions |
|---|---|---|
| Anthropic | n/a | n/a, 0.9.8 |
Updated description with significant technical details, added vendor information, changed severity to CRITICAL, updated CVSS estimate to 9.0, and included new CWE IDs and tags.
Updated severity to CRITICAL, added affected version 0.9.8, and corrected exploit availability status.
Initial creation
