Fosowl vulnerabilities
We track 3 vulnerabilities in Fosowl products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
Latest Fosowl vulnerabilities
- 8.1 High severity
AgenticSeek: Active Debug Code
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execut
- 9.8 Critical severity
AgenticSeek: Missing Authentication for Critical Functionality
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777
- 9.8 Critical severity
agenticSeek: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotel