CVE-2026-19019

Name of the Vulnerable Software and Affected Versions poco-ai poco-agent versions prior to 0.5.5

Description A security flaw exists in the Claude File Handler component within the WorkspaceManager. setup session persistence() function located in the executor/app/core/workspace.py file. Remote manipulation of this function can lead to incomplete cleanup. This issue is characterized by high complexity and difficult exploitability.

Recommendations Update poco-ai poco-agent to version 0.5.5 or later. As a temporary mitigation, restrict access to the WorkspaceManager. setup session persistence() function.