---
id: CVE-2026-97635
title: Agent Zero Web UI XSS
summary: >-
  The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided
  input in chat messages or file uploads. When Agent Zero reproduces content in
  the chat interface, any injected JavaScript is executed in the context of the
  victi…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cvssSource: cna
cwe:
  - CWE-79
vendor: Agent Zero
product: Agent Zero
affected:
  - agent_zero < 1.15
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T17:57:24.056Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-97635'
references:
  - url: 'https://github.com/agent0ai/agent-zero/releases/tag/v1.15'
    label: url
  - url: 'https://github.com/agent0ai/agent-zero/issues/943'
    label: url
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-97635'
    label: url
  - url: >-
      https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-296-01.json
    label: url
tags:
  - cve.org
ingestedAt: '2026-10-22T22:00:50.360Z'
---

## Overview

The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI session.

## Affected

- `agent_zero < 1.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.