This vulnerability in poco-ai poco-agent (versions 0.5.0 through 0.5.4) involves incomplete cleanup in the WorkspaceManager._setup_session_persistence function within the executor/app/core/workspace.py file of the Claude File Handler component. The flaw allows remote attackers to manipulate the function, potentially leaving residual data or state that should have been cleaned up. Exploitation is considered difficult due to high attack complexity, and no privileges or user interaction are required. Public exploit code has been released, increasing the risk of attacks.

The incomplete cleanup may lead to residual data or state persistence that could be leveraged by attackers for further malicious activity. However, the attack complexity is high, and no privileges or user interaction are needed, which somewhat limits the ease of exploitation. The availability of public exploit code increases the risk, but no known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented. Users should monitor vendor communications for patches addressing this vulnerability.