Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
fosowl/agenticseek
main @ ae57a23
5
Fixes
1
CVEs
CRITICAL
Peak severity
60.0%
Coverage
Highlights
Authentication Bypass: 1 prior fix. Scrutinize any change in this area.
api.py: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Authentication Bypass: The /query route had no auth dependency, allowing anyone to reach the agent interpreters and trigger remote code execution. Mandatory bearer-token auth was added but must be verified on all sibling routes and sub-loaders.
Remote Code Execution: Backend bound to 0.0.0.0 with unauthenticated /query and permissive CORS exposed the service to unauthenticated remote RCE. Loopback binding and CORS restriction were applied but need to be consistent across all deployment configurations.
Remote Code Execution: CVE-2026-5584 shows command injection in PyInterpreter.execute via the query endpoint, indicating that interpreter safety checks may be incomplete or bypassable even with auth in place.