VulnSocial

CVE-2026-115727

LOWCVSS 9.2 · CRITICAL

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-489

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts
  • Parameter Watch@ParameterWatch

    🚨 CVE-2026-115727 (8.1) 🚨 AgenticSeek's LLM server runs Python code and commands for anyone who reaches its port and works out the debugger PIN. Builds before commit 409840c are affected. Update to 409840c or later. https://t.co/i6LGNlxA0F

    1001075
    14 followersView on X
  • みみみ@mmm_tech

    AgenticSeek（ローカルで動かすエージェント）使ってる人、CVSS 9.2出てる（CVE-2026-115727）。llm_server が Flask のデバッグモードのまま全部のIPで待ち受けてて、ポートに届いてデバッガPINを割り出されるとコード実行まで行く。commit 409840c 以降に更新して、外から届かないか確認しとこ

    0000066
    786 followersView on X

Explore more

Back to dashboard