What is CVE-2026-19019?

CVE-2026-19019 is a medium-severity vulnerability in Poco-ai Poco-agent, classified under Incomplete Cleanup. CVSS score: 4.8/10. Published 2026-08-06.

How severe is CVE-2026-19019?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Vulnerability in Poco-ai Poco-agent

CVE-2026-19019

A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session_persistence of the file executor/app/core/workspace.py of the component Claude File Handler. The manipulation r…

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Poco-ai Poco-agent — versions 0.5.0, 0.5.1, 0.5.2

Weakness classification (CWE)

CWE-459 — Incomplete Cleanup

References

cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (issue-tracking, exploit, patch)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)

Frequently asked questions

What is CVE-2026-19019?: CVE-2026-19019 is a medium-severity vulnerability in Poco-ai Poco-agent, classified under Incomplete Cleanup. CVSS score: 4.8/10. Published 2026-08-06.
How severe is CVE-2026-19019?: Medium severity. CVSS v3 base score is 4.8 out of 10.