Remote Code Execution Vulnerability in AgenticSeek by Fosowl

CVE-2026-72776

What is CVE-2026-72776?

AgenticSeek, an autonomous agent application developed by Fosowl, has a vulnerability that permits unauthenticated remote code execution. Attackers who gain network proximity can exploit this flaw by submitting specially crafted queries to the open POST /query API endpoint, which is accessible on 0.0.0.0:7777 with wildcard CORS settings. This vulnerability enables adversaries to send arbitrary HTTP requests that the application processes. By leveraging the BashInterpreter and invoking subprocess.Popen with shell=True and safety=False, attackers can bypass an inadequate command blocklist, leading to the potential execution of arbitrary commands on the host system.

References