CVE-2026-115727: AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llmserver/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llmserver privileges.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Any deployment running an affected AgenticSeek version where llm_server is reachable over the network is exposed. The server binds to all interfaces, so exposure depends on whether the server port is accessible to an attacker.
What does an attacker need to exploit it?
An attacker needs network access to the llm_server port and the ability to obtain the derivable Werkzeug debugger PIN. No authentication or user interaction is required.
What access can successful exploitation provide?
Successful exploitation allows execution of Python code and operating-system commands with the privileges of the llm_server process. The reported impact includes confidentiality, integrity, and availability compromise.
What should be done if patching cannot happen immediately?
Restrict network access to the llm_server port so untrusted attackers cannot reach it. The issue is caused by Flask debug mode being enabled while the service binds to all interfaces.