CVE-2026-30624

Agent Zero 0.9.8 contains a remote code execution vulnerability in its External MCP Servers configuration feature. The application allows users to define MCP servers using a JSON configuration containing arbitrary command and args values. These values are executed by the application when the configuration is applied without sufficient validation or restriction. An attacker may supply a malicious MCP configuration to execute arbitrary operating system commands, potentially resulting in remote code execution with the privileges of the Agent Zero process.

• CWE-77

• https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/Third Party Advisory

Published

Apr 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30615A prompt injection vulnerability in Windsurf 1.9544.26 allow…8
• CVE-2026-30616Jaaz 1.0.30 contains a remote code execution vulnerability i…7.3
• CVE-2026-30617LangChain-ChatChat 0.3.1 contains a remote code execution vu…8.6
• CVE-2026-30618xszyou Fay 4.3.1 contains a remote code execution vulnerabil…9.8
• CVE-2026-3062Out of bounds read and write in Tint in Google Chrome on Mac…9.8
• CVE-2026-30623LiteLLM 1.18.10 contains a remote code execution vulnerabili…9.8
• CVE-2026-30625Upsonic 0.71.6 contains a remote code execution vulnerabilit…9.8
• CVE-2026-3063Inappropriate implementation in DevTools in Google Chrome pr…5.4
• CVE-2026-30631An issue was discovered in bytebot-ai in commit 3d37894ce07e…9.8
• CVE-2026-30632Directory traversal vulnerability in knowns-dev/knowns 0.11.…7.5
• CVE-2026-30633Directory traversal vulnerability in knowns-dev/knowns 0.11.…7.5
• CVE-2026-30635Command injection vulnerability in automagik-genie 2.5.27 MC…8.1