AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fix or patch referenced
- Public exploit
- None on Exploit-DB
Summary
AgenticSeek, an AI agent project, is affected through its llm_server component, which runs with debug mode enabled on all network interfaces. An attacker who can reach that server and work out its debugger PIN could run arbitrary Python and operating system commands with the privileges of the llm_server process.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.
Affected versions
- Fosowl AgenticSeek
fixed in 409840c033851d861c5c83a91c05fd4a2a75a096