Question 1

What is CVE-2026-51851 — CVE-2026-51851?

Accepted Answer

modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks.

Question 2

What is the authoritative source for CVE-2026-51851?

Accepted Answer

CVE-2026-51851 (CVE-2026-51851) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-51851CVE-2026-51851

Description

Scoring