Vulnerabilities

TI-2026-79731 CVE-2026-115727 · GHSA-r5cp-9ffr-m5mf

AgenticSeek before commit 409840c RCE via Werkzeug debugger in llm_server

MEDIUM 43

AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00699 Published 2026-10-23 Fixed CWE-489

TI-2026-51002 CVE-2026-72776 · GHSA-wrjr-rgfw-cm84

AgenticSeek Unauthenticated RCE via /query API Endpoint

HIGH 81

AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.011 Published 2026-08-13 Fixed CWE-306

TI-2026-04895 CVE-2026-5584 · GHSA-8mc4-x5m7-gvc2

Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

HIGH 70

A vulnerability has been found in Fosowl agenticSeek 0.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00399 Published 2026-04-05 No fix listed CWE-74

Vulnerabilities

Filters

AgenticSeek before commit 409840c RCE via Werkzeug debugger in llm_server

AgenticSeek Unauthenticated RCE via /query API Endpoint

Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection