SYS::ONLINE
Wasteland.
Briefs2197
Issues24
SinceFeb 2026
LIVE
⚡ Active KEV CVE-2026-72776 2026-08-13

CVE-2026-72776: Unauthenticated RCE in AgenticSeek Query API

"A critical flaw (CVSS 9.8) in the open-source AgenticSeek autonomous agent lets any attacker who can reach the service over the network execute arbitrary shell commands on the host with no authentication required."

A critical flaw (CVSS 9.8) in the open-source AgenticSeek autonomous agent lets any attacker who can reach the service over the network execute arbitrary shell commands on the host with no authentication required.

What Is It

AgenticSeek (commit fc242c7) exposes a POST /query API endpoint on 0.0.0.0:7777 with wildcard CORS and no authentication. An attacker can submit crafted queries that cause the autonomous agent to generate and execute shell commands through its BashInterpreter, which calls subprocess.Popen with shell=True and safety=False. The component's command blocklist is incomplete and can be bypassed, resulting in full host-level code execution.

The issue is classified as CWE-306 (Missing Authentication for Critical Function). VulnCheck, the disclosing party, assigns a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS 4.0 score of 9.3, both rated CRITICAL.

Why It Matters

Every barrier that normally slows an attacker is absent here: the attack vector is Network, meaning exploitation is possible from anywhere with a route to the listening port, not just from an adjacent segment, attack complexity is low, no privileges are required, and no user interaction is needed. Confidentiality, integrity, and availability impacts are all rated HIGH. Because the service binds to 0.0.0.0 by default, an install that the operator assumed was local is reachable from the wider network, and wildcard CORS widens the set of contexts that can reach it.

CVE-2026-72776 does not appear in CISA's Known Exploited Vulnerabilities catalog as of this writing, so there is no confirmation of active exploitation and no KEV-mandated remediation deadline or required action for federal agencies. Operators should treat the absence of a KEV listing as a statement about catalog status only, not as evidence that the flaw is not being exploited.

What's Vulnerable

No CPE entries were published with the record.

Patch Status

The NVD record was published 2026-08-13 with a status of "Received," meaning it has not yet completed NVD analysis. No vendor patch version is stated in the supplied data. The references include an upstream issue (#520) and a pull request (#534) with associated changes, which appear to address the report; operators should track those directly. No workaround is specified in the source material.

Sources