AgenticSeek unauthenticated remote code execution vulnerability
AgenticSeek contains an unauthenticated remote code execution vulnerability in its POST /query API endpoint that allows network-adjacent attackers to execute arbitrary shell commands through a crafted query.
Disclosed 13 August 2026 · Record updated 13 September 2026
Impact
Unauthenticated remote code execution allowing full host-level code execution on affected systems
Our coverage
No articles linked to this incident yet.
Sources
- nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-72776
