The Fosowl AgenticSeek API is susceptible to unauthenticated remote code execution, enabling attackers to gain host-level access to the affected system.

This is a missing authentication for a critical function (CWE-306) flaw. Attackers can submit crafted queries to the unprotected POST /query API endpoint, causing the system to execute shell commands via the BashInterpreter with safety features disabled.

Successful exploitation allows an attacker to execute arbitrary commands with the privileges of the AgenticSeek application. This leads to full host-level code execution, which grants the attacker the ability to steal sensitive data, pivot into internal networks, or disrupt critical business operations. With a CVSS score of 9.8, the risk to the organization is extreme.

Immediate Action: Update Fosowl AgenticSeek to the latest patched version and ensure the API endpoint is restricted from public access.

Proactive Monitoring: Monitor network traffic for anomalous POST requests to the /query endpoint and audit system logs for unexpected subprocess execution.

Compensating Controls: Implement network-level restrictions, such as firewall rules or VPN requirements, to prevent the API from being reachable by unauthorized network-adjacent attackers.

Public Exploit Available: Unknown

The severity of this flaw cannot be overstated, as it provides a direct path to host-level command execution. Organizations must apply the vendor patch immediately and ensure that the AgenticSeek service is not exposed to the public internet without robust authentication and network access controls.