Evidence record / agent-zero
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-09-21-agent-zero-v2-12-exposes-connected-cli-and-launcher-host-folders-in-the-webui-files-panel
v2.12 exposes connected CLI and Launcher host folders in the WebUI Files panel. Capability: when the A0 CLI or Launcher is connected, the WebUI file browser and editor can list, upload, download and edit files in the host folders that connector exposes. Transfers go over authenticated HTTP with SHA-256 receipts and atomic writes, and the limits default to 10 MiB for editing and 100 MiB for transfers. The commit says it respects host permissions, and scope is still configured in the CLI or Launcher, not in the WebUI. Hardening: archive extraction now has expansion and entry budgets and rejects unsafe members. WebSocket payload ceilings are enforced, and remote connector tool payloads are bounded.
Channel: tagged-release. Half: both. Date: 2026-09-09.
Operator consequence: Whatever host root you expose to the CLI or Launcher can now also be reached from any browser session logged into the WebUI, not only through agent tools. Before you connect, check which folders the connector exposes and whether they are writable. Treat the WebUI login as a credential for those host files.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-agent-zero-v2-12-exposes-connected-cli-and-launcher-host-folders-in-the-webui-files-panel
Profile citations
- Agent Zero / claim / host-folders-in-webui
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact