Agenticseek
Monthly
Unauthenticated remote code execution in AgenticSeek (commit fc242c7) lets any network-adjacent attacker run arbitrary OS commands by POSTing crafted queries to the /query API endpoint, which the autonomous agent turns into shell commands executed via BashInterpreter (subprocess.Popen with shell=True and safety=False). The endpoint listens on 0.0.0.0:7777 with wildcard CORS and no authentication, so a single crafted HTTP request yields full host-level command execution, and an incomplete command blocklist fails to contain it. Rated CVSS 4.0 9.3 (critical); no public exploit identified at time of analysis and not listed in CISA KEV, but exploitation is trivial once the port is reachable.
Remote code execution in Fosowl agenticSeek 0.1.0 allows unauthenticated attackers to inject arbitrary Python code via the PyInterpreter.execute function in the query endpoint, enabling full system compromise. The vulnerability exploits unsafe code execution in the component responsible for interpreting user-supplied queries. Publicly available exploit code exists, and the vendor has not responded to early disclosure notifications.
Unauthenticated remote code execution in AgenticSeek (commit fc242c7) lets any network-adjacent attacker run arbitrary OS commands by POSTing crafted queries to the /query API endpoint, which the autonomous agent turns into shell commands executed via BashInterpreter (subprocess.Popen with shell=True and safety=False). The endpoint listens on 0.0.0.0:7777 with wildcard CORS and no authentication, so a single crafted HTTP request yields full host-level command execution, and an incomplete command blocklist fails to contain it. Rated CVSS 4.0 9.3 (critical); no public exploit identified at time of analysis and not listed in CISA KEV, but exploitation is trivial once the port is reachable.
Remote code execution in Fosowl agenticSeek 0.1.0 allows unauthenticated attackers to inject arbitrary Python code via the PyInterpreter.execute function in the query endpoint, enabling full system compromise. The vulnerability exploits unsafe code execution in the component responsible for interpreting user-supplied queries. Publicly available exploit code exists, and the vendor has not responded to early disclosure notifications.