The vulnerability allows attackers who can reach the llm_server port to exploit a hard‑coded Flask debug mode that binds to all interfaces. By retrieving the derivable Werkzeug debugger PIN, an attacker can execute arbitrary Python statements and operating‑system commands with the privileges of the service. This results in full compromise of the host, with no authentication required. The weakness corresponds to CWE‑489.

The issue exists in the Fosowl AgenticSeek application, specifically the llm_server component. No specific version range is listed, but the vulnerability exists in releases before the commit identified by 409840c. Users should examine their deployments of AgenticSeek for the presence of the hard‑coded debug mode.

The CVSS score of 9.2 indicates a very high severity. The EPSS score is 1%, indicating a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is network: an adversary needs to reach the server port, discover the debug PIN, and then issue payloads. The exploit requires no authentication and could be performed by anyone able to connect to the exposed service.