CVE-2026-108753criticalCWE-798

CVE-2026-108753: falha crítica em agnaistic agnai

Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar agnai

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.4%
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Produtos afetados
agnaistic · agnai
CVEs relacionadas — agnaistic agnai

No mesmo produto, das mais perigosas para as menos.

CVE-2024-47169HIGHAgnai vulnerable to Remote Code Execution via JS Upload using Directory TraversalEPSS 0.8%CVE-2024-47171MEDIUMAgnai vulnerable to Relative Path Traversal in Image UploadEPSS 0.5%CVE-2024-47170MEDIUMAgnai File Disclosure Vulnerability: JSON via Path TraversalEPSS 0.5%