CVE-2026-19019: poco-ai poco-agent incomplete cleanup in session persistence

Summary

CVE-2026-19019 is a security flaw in poco-ai poco-agent up to 0.5.4, located in the function WorkspaceManager._setup_session_persistence in executor/app/core/workspace.py, within the Claude File Handler component. The manipulation results in incomplete cleanup (CWE-459). The source states the attack may be performed remotely, but it is highly complex and difficult to exploit, and an exploit has been publicly released.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database
• MediumAttackers Crash Claude's 'Office Party' Flaw to Run Malicious Code on LinuxSimilar attack · Dark Reading
• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News