modelscope agent-zero directory traversal in FileBrowser.save_text_file (agent can write arbitrary files)

CVE-2026-51851: agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to path traversal in python/helpers/file_browser.py:FileBrowser.save_text_file, which accepts user-controlled file paths without normalization or validation. (A sibling CVE-2026-51852 covers save_file_b64 in the same file.)

In an agent framework, the file-browser tool is reachable by a model steered through untrusted content; an unconstrained path writes outside the intended directory, enabling arbitrary file write/overwrite on the agent host.

An agent steered by untrusted content calls save_text_file (or save_file_b64) with an attacker-supplied path containing traversal to write outside the intended directory.

modelscope agent-zero 1.7, 1.8, 1.9, 1.10.

Upgrade/patch agent-zero (validate and normalize file paths in FileBrowser), and restrict the file-browser tool to the intended workspace directory.