CVE-2026-110631: critical vulnerability in moghtech komodo
Komodo through 2.3.3 Periphery Agent Unauthenticated RCE via Default Configuration
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.3epss 0.9%
Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_public_keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to issue Periphery API requests, including terminal sessions and container operations, executing commands on managed hosts typically as root.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
moghtech · komodopublic PoCs found — 1
cve_referenceravindulakmina.pages.dev/advisories/cve-2026-110631-komodo-periphery-fail-open-rce/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — moghtech komodo
In the same product, most dangerous first.
References
https://github.com/moghtech/komodo/blob/v1.19.5/bin/periphery/src/api/router.rshttps://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/connection/server.rshttps://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/state.rs#L82-L88https://github.com/moghtech/komodo/blob/v2.3.3/config/periphery.config.tomlhttps://github.com/moghtech/komodo/issues/1690https://ravindulakmina.pages.dev/advisories/cve-2026-110631-komodo-periphery-fail-open-rce/https://ravindulakmina.pages.dev/advisories/komodo-periphery-fail-open-rce/https://www.vulncheck.com/advisories/komodo-through-2.3.3-periphery-agent-unauthenticated-rce-via-default-configuration