Critical severity · published Apr 5, 2026
CVE-2026-5584
Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection
9.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
agenticSeek · Fosowl
0.1.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-5584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-5584
Issue Tracking
https://github.com/August829/CVEP/issues/29
Third Party Advisory
https://vuldb.com/submit/784052
Third Party Advisory
https://vuldb.com/vuln/355383
Permissions Required
https://vuldb.com/vuln/355383/cti
More from agenticSeek
9.8
CVE-2026-72776
AgenticSeek Unauthenticated RCE via /query API Endpoint
8.1
CVE-2026-115727
AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server