CVE-2026-72776
Description
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send unauthenticated HTTP requests that cause the autonomous agent to generate and execute shell commands through BashInterpreter using subprocess.Popen with shell=True and safety=False, bypassing the incomplete command blocklist to achieve full host-level code execution.
How to fix
- Fosowl AgenticSeekf1eb2cfc721f8a21dd16a8b048a9ca89f3259f6f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Fosowl AgenticSeek | v < f1eb2cfc721f8a21dd16a8b048a9ca89f3259f6f | f1eb2cfc721f8a21dd16a8b048a9ca89f3259f6f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.