What happened
NVD published CVE-2026-72776 (CVSS 9.8, Critical) on 2026-08-13, describing an unauthenticated remote code execution vulnerability in AgenticSeek where crafted queries to the unprotected POST /query API endpoint (bound to all interfaces with wildcard CORS) allow arbitrary command execution.
Why it matters
AgenticSeek is a widely-used local AI agent framework; this flaw allows any network-adjacent party — no authentication or credentials needed — to gain full command execution on the host, a textbook agent-execution attack class.
Attack vector
Any network-adjacent attacker submits crafted queries to the unprotected POST /query endpoint, bound to 0.0.0.0:7777 with wildcard CORS and no authentication, to execute arbitrary commands
Affected systems
AgenticSeek (commit fc242c7 and prior)
Mitigation
Restrict network binding away from 0.0.0.0, add authentication to the /query endpoint, and disable wildcard CORS; check for upstream patch