CVE Intelligence

Vulnerabilidades do Keploy Keploy

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Keploy Keploy: 1 registro(s), com versões afetadas e correções.

CVE-2026-82641 Alta · 8.6 CWE-306 30/08/2026
Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure
Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt recorded TLS traffic, or invoke /agent/stop and /agent/storemocks to manipulate recording sessions.