by Kastro
Paper/Archive/CVE-2026-115727

CVE-2026-115727

Fosowl AgenticSeek — AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server

EPSS 0.7%CVSS 9.2
critical.is priorityof 100
38
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 53.1.531 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.

Affected

ProductAffectedFixed inSource
AgenticSeek< 409840c033851d861c5c83a91c05fd4a2a75a096409840c033851d861c5c83a91c05fd4a2a75a096CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheck (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

patchgithub.com/Fosowl/agenticSeek/commit/409840c033851d861c5c83a91c05fd4a2a75a096patchgithub.com/Fosowl/agenticSeek/pull/558writeupgithub.com/Fosowl/agenticSeek/blob/d238f8e5de10e4ece40d93d80fb4daa4c8a2f34b/llm_server/app.py#L52-L53writeupvulncheck.com/advisories/agenticseek-before-commit-409840c-rce-via-exposed-werkzeug-debugger-in-llm-server