CVE-2026-19019: A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_

A security flaw was found in poco-ai poco-agent versions up to 0.5.4 in the WorkspaceManager._setup_session_persistence function, which results in incomplete cleanup (not fully removing temporary files or data after a session ends). The vulnerability is difficult to exploit and requires complex remote attacks, with a low severity rating (CVSS 2.9).