Vulnerabilidades de Agnaistic
CVEs publicadas que afetam produtos de Agnaistic: 1 registro(s), com severidade, exploração e correções.
CVE-2026-108753
Crítica · 9.4
CWE-798 11/10/2026
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host...
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.