Remote Code Execution in AgenticSeek Affected by Flask Debug Mode
CVE-2026-115727

9.2CRITICAL

Key Information:

Vendor

Fosowl

Status
Agenticseek
Vendor
CVE Published:
23 October 2026

What is CVE-2026-115727?

The AgenticSeek application prior to commit 409840c contains a remote code execution vulnerability due to Flask's debug mode being hardcoded and accessible on all interfaces. This allows attackers, upon reaching the exposed server port, to exploit the reachable Werkzeug debugger with a derivable PIN. This breach permits execution of arbitrary Python code and operating system commands with the privileges of the llm_server, potentially leading to severe security implications.

Affected Version(s)

AgenticSeek 0 < 409840c033851d861c5c83a91c05fd4a2a75a096

References

https://github.com/Fosowl/agenticSeek/commit/409840c03385...
patch
https://github.com/Fosowl/agenticSeek/pull/558
issue-trackingpatch
https://github.com/Fosowl/agenticSeek/blob/d238f8e5de10e4...
technical-description

CVSS V4

Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

huangjicheng
.