Executive brief
Fosowl agenticSeek is an AI-driven search or agent tool. A critical security flaw in its query processing component allows remote attackers to execute arbitrary commands on the underlying system. This could lead to a complete takeover of the application, unauthorized access to sensitive data, or a total disruption of service.
Technical details
A code injection vulnerability exists in Fosowl agenticSeek 0.1.0 within the 'query Endpoint' component. The root cause is located in the PyInterpreter.execute function in sources/tools/PyInterpreter.py, which fails to properly neutralize special elements before execution. A remote, unauthenticated attacker can send a specially crafted request to the endpoint to execute arbitrary Python code. This vulnerability has a CVSS 3.1 base score of 9.8 (Critical) according to NIST. A public exploit (PoC) has been disclosed, and the vendor has reportedly not responded to the disclosure.
Affected products
- Fosowl agenticSeek 0.1.0
Timeline
- 2026-03-20: disclosed: Initial public disclosure via GitHub issue
- 2026-04-05: advisory: CVE published and VulDB entry created