High severity · published Oct 23, 2026
CVE-2026-115727
AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
New
8.1
CVSS
0.7%
EPSS
No
On KEV
Description
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
AgenticSeek · Fosowl
before 409840c033851d861c5c83a91c05fd4a2a75a096 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-115727
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-115727
github.com
https://github.com/Fosowl/agenticSeek/blob/d238f8e5de10e4ece40d93d80fb4daa4c8a2f34b/llm_server/app.py#L52-L53
github.com
https://github.com/Fosowl/agenticSeek/commit/409840c033851d861c5c83a91c05fd4a2a75a096
github.com
https://github.com/Fosowl/agenticSeek/pull/558
www.vulncheck.com
https://www.vulncheck.com/advisories/agenticseek-before-commit-409840c-rce-via-exposed-werkzeug-debugger-in-llm-server
More from AgenticSeek
9.8
CVE-2026-72776
AgenticSeek Unauthenticated RCE via /query API Endpoint
9.8
CVE-2026-5584
Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection