Fosowl

Agenticseek

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-73039

  • EPSS 0.22%
  • Veröffentlicht 13.08.2026 21:34:04
  • Zuletzt bearbeitet 14.08.2026 19:18:00

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary ...

9.8

CVE-2026-72776

  • EPSS 0.84%
  • Veröffentlicht 13.08.2026 21:14:18
  • Zuletzt bearbeitet 18.08.2026 02:17:27

AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0....

9.8

CVE-2026-5584

Exploit
  • EPSS 0.39%
  • Veröffentlicht 05.04.2026 16:45:10
  • Zuletzt bearbeitet 24.07.2026 20:10:00

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launch...