CVE-2026-19019 in poco-agent
Summary
by MITRE • 08/06/2026
A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation results in incomplete cleanup. The attack may be performed from remote. Attacks of this nature are highly complex. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 08/06/2026
The security vulnerability identified in poco-ai poco-agent version 0.5.4 represents a critical flaw within the Claude File Handler component that compromises session persistence management. This vulnerability resides in the WorkspaceManager._setup_session_persistence function located in executor/app/core/workspace.py, indicating a fundamental weakness in how the application handles user sessions and file operations. The incomplete cleanup mechanism creates persistent security risks that can be exploited by remote attackers to maintain unauthorized access to system resources.
The technical implementation flaw stems from inadequate resource management during session handling processes, where temporary files or memory allocations are not properly terminated or cleared upon session completion. This type of vulnerability aligns with CWE-404, which addresses improper resource cleanup, and falls under the broader category of insufficient cleanup issues that can lead to information disclosure, privilege escalation, or denial of service conditions. The remote exploitability aspect suggests that attackers can leverage this weakness without requiring physical access to the target system, making it particularly dangerous in networked environments.
The operational impact of this vulnerability extends beyond simple session persistence failures, as it creates potential entry points for malicious actors to maintain long-term access to compromised systems. Attackers who have successfully exploited this flaw could potentially establish persistent backdoors, harvest sensitive data through continued file access, or use the compromised session to launch further attacks against networked resources. The difficulty of exploitation rating indicates that while sophisticated attack techniques are required, the public availability of exploits significantly lowers the barrier for threat actors to weaponize this vulnerability.
Security professionals must implement immediate mitigation strategies including updating to patched versions of poco-agent, implementing network monitoring to detect anomalous session behavior, and conducting thorough security assessments of all file handling processes within the affected system. The release of exploit code into the public domain accelerates the urgency of remediation efforts, as threat actors can now deploy automated attacks against vulnerable installations without requiring advanced technical skills or extensive research time. Organizations should also review their incident response procedures to ensure readiness for potential exploitation attempts targeting this specific vulnerability category.
The broader implications for cybersecurity practices highlight the importance of robust session management protocols and comprehensive code review processes that identify resource cleanup vulnerabilities before deployment. This case demonstrates how seemingly minor implementation flaws in core application components can create significant security risks when combined with public exploit availability, emphasizing the need for continuous security testing and rapid patch deployment cycles to protect against emerging threats.