Junglewise Threat Intelligence

CVE-2026-5584: Fosowl agenticSeek code injection in PyInterpreter.execute

CVE-2026-5584 · Severity: high · CVSS 7.3 · Published 2026-04-05

Executive brief

Fosowl agenticSeek is an AI-driven search or agent tool. A critical security flaw in its query processing component allows remote attackers to execute arbitrary commands on the underlying system. This could lead to a complete takeover of the application, unauthorized access to sensitive data, or a total disruption of service.

Technical details

A code injection vulnerability exists in Fosowl agenticSeek 0.1.0 within the 'query Endpoint' component. The root cause is located in the PyInterpreter.execute function in sources/tools/PyInterpreter.py, which fails to properly neutralize special elements before execution. A remote, unauthenticated attacker can send a specially crafted request to the endpoint to execute arbitrary Python code. This vulnerability has a CVSS 3.1 base score of 9.8 (Critical) according to NIST. A public exploit (PoC) has been disclosed, and the vendor has reportedly not responded to the disclosure.

Affected products

  • Fosowl agenticSeek 0.1.0

Timeline

  • 2026-03-20: disclosed: Initial public disclosure via GitHub issue
  • 2026-04-05: advisory: CVE published and VulDB entry created

References

Related threats