CVE-2026-5584

HighCVSS 7.3

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

A vulnerability has been found in Fosowl agenticSeek 0.1.0 affecting the function PyInterpreter.execute in the file sources/tools/PyInterpreter.py of the query Endpoint component. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond.

Risk Assessment

A remote attacker can execute arbitrary Python code on the server, potentially leading to full system compromise and data access.

Recommendation

Contact the vendor for a patch or consider temporarily disabling the query endpoint if possible.

Other vulnerabilities in agenticSeek

CVE-2026-72776Critical
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send unauthenticated HTTP requests that cause the autonomous agent to generate and execute shell commands through BashInterpreter using subprocess.Popen with shell=True and safety=False, bypassing the incomplete command blocklist to achieve full host-level code execution.

Original NVD description (English source)

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.