This vulnerability involves incomplete cleanup in the WorkspaceManager._setup_session_persistence function within the executor/app/core/workspace.py file of the poco-ai poco-agent product, versions 0.5.0 through 0.5.4. The flaw allows remote attackers to manipulate session persistence, potentially leading to residual data or state remaining after expected cleanup. The attack complexity is high, and no privileges or user interaction are required. Public exploit code is available, but no official remediation or patch has been documented as of the publication date.

The incomplete cleanup may allow attackers to leave residual data or state in the system, which could be leveraged for further attacks or information disclosure. The vulnerability is remotely exploitable without privileges or user interaction, but the high attack complexity reduces the likelihood of widespread exploitation. The availability of public exploit code increases risk, though no known active exploitation in the wild has been reported.

No official patch or remediation has been confirmed at this time. Users should monitor vendor advisories for updates. Given the high attack complexity and lack of required privileges or user interaction, immediate urgent action may not be necessary, but caution is advised. Restricting network access to the affected service and applying defense-in-depth controls may help reduce exposure until a fix is available.