CyberRota Analysis
AI-GeneratedAn unauthenticated remote code execution vulnerability exists in AgenticSeek, allowing network-adjacent attackers to execute arbitrary commands via crafted queries to the exposed POST /query API endpoint. This critical flaw enables attackers to leverage the BashInterpreter to run shell commands, effectively compromising the host system. Organizations using AgenticSeek should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint bound to 0.0.0.0:7777 with wildcard CORS. Attackers can send unauthenticated HTTP requests that cause the autonomous agent to generate and execute shell commands through BashInterpreter using subprocess.Popen with shell=True and safety=False, bypassing the incomplete command blocklist to achieve full host-level code execution.