Is there a public PoC exploit available for CVE-2026-5584?

Yes, a public proof-of-concept exploit is available for CVE-2026-5584. Prioritise patching immediately. EPSS: 0.0%.

Agenticseek CVE-2026-5584

Q: What is the CVSS score of CVE-2026-5584?

CVE-2026-5584 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19113 MEDIUM

Code Injection (CWE-94)

2026-04-05 VulDB

GHSA-8mc4-x5m7-gvc2

RCE Code Injection Agenticseek

5.5

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 17:00 euvd

EUVD-2026-19113

Analysis Generated

Apr 05, 2026 - 17:00 vuln.today

CVE Published

Apr 05, 2026 - 16:45 nvd

MEDIUM 6.9

DescriptionCVE.org

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote code execution in Fosowl agenticSeek 0.1.0 allows unauthenticated attackers to inject arbitrary Python code via the PyInterpreter.execute function in the query endpoint, enabling full system compromise. The vulnerability exploits unsafe code execution in the component responsible for interpreting user-supplied queries. Publicly available exploit code exists, and the vendor has not responded to early disclosure notifications.

Technical ContextAI

The vulnerability stems from CWE-94 (Improper Control of Generation of Code, Code Injection), specifically within the PyInterpreter class in sources/tools/PyInterpreter.py. The query endpoint accepts user input that is passed directly to the execute function without adequate sanitization or sandboxing, allowing attackers to inject malicious Python code that runs with the privileges of the application process. Fosowl agenticSeek is an agent-based framework that processes natural language queries and translates them into executable code; the PyInterpreter component is designed to execute Python code dynamically, but lacks input validation mechanisms necessary to prevent code injection attacks.

RemediationAI

No vendor-released patch has been identified at time of analysis. Users of Fosowl agenticSeek 0.1.0 should immediately discontinue use of the query endpoint or implement strict input validation and sandboxing mechanisms at the application level to prevent untrusted code from reaching the PyInterpreter.execute function. As a temporary mitigation, restrict network access to the query endpoint using firewall rules or API gateway controls, limiting exposure to trusted sources only. Monitor the official Fosowl repository and VulDB (https://vuldb.com/vuln/355383) for patch availability. Upgrade to a newer version once the vendor releases a patched release that includes input sanitization and proper code execution controls.