Vulnerabilidades do Agnaistic Agnai

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Agnaistic Agnai: 1 registro(s), com versões afetadas e correções.

CVE-2026-108753 Crítica · 9.4 CWE-798 11/10/2026

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host...

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.