Read the docs
TI-2026-79731 Aliases CVE-2026-115727GHSA-r5cp-9ffr-m5mf

AgenticSeek before commit 409840c RCE via Werkzeug debugger in llm_server

Priority MEDIUM 43CWE-489Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

AgenticSeek before commit 409840c contains a remote code execution vulnerability (CWE-489, Active Debug Code). The file llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. An attacker who can reach the server port and derive the Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges. CVSS 4.0 base score 9.2 (CRITICAL).

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00699 53rd percentileScored 2026-11-07
Fix Fixed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

No affected products listed by the sources yet.

Remediation

Update AgenticSeek to commit 409840c or later. Until then, disable Flask debug mode in llm_server/app.py and restrict network access to the server port.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Timeline

  1. 2026-10-23 Threatist record created from CVE-2026-115727
  2. 2026-10-23 CISA SSVC decision points changed
  3. 2026-10-23 Priority changed: MEDIUM → LOW
  4. 2026-10-23 Alias added: GHSA-r5cp-9ffr-m5mf
  5. 2026-10-24 Priority changed: LOW → MEDIUM

References

Patch 2

Other 1

  • TI-2026-51002 AgenticSeek Unauthenticated RCE via /query API Endpoint CVSS 4.0CRITICAL 9.3
  • TI-2026-04895 Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection CVSS 4.0MEDIUM 6.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences