A vulnerability was found in frdel/agent0ai agent-zero 0.9.7. It has been rated as critical. This affects the function
handle_pdf_document of the file python/helpers/document_query.py. This manipulation causes server-side request forgery.
This vulnerability is tracked as CVE-2026-4308. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
