CVE-2026-30624 - Vulnerability Analysis

Overview

Agent Zero 0.9.8 contains a remote code execution caused by insufficient validation of arbitrary command and args in External MCP Servers JSON configuration, letting attackers execute OS commands remotely, exploit requires malicious MCP configuration.

Severity & Score

Impact

Attackers can execute arbitrary OS commands remotely with Agent Zero process privileges, potentially compromising the system.

Mitigation

Update to the latest version that fixes this vulnerability.

References

• https://www.ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner