Hard-Coded Credentials Vulnerability in Agnaistic Agnai by Agnaistic
⚠️ CVE-Referenzen:
CVE-2026-108753
Agnaistic - Agnai - CRITICAL - CVE-2026-108753.
The Agnaistic Agnai application, up to version 1.0.555, contains a serious vulnerability due to hard-coded credentials in its Docker Compose configuration file. This flaw allows unauthenticated attackers to gain administrative access by using a fixed password and public JWT secret. As a result, malicious actors can log in as administrators, create their own JWTs with elevated privileges, impersonate legitimate users, reset passwords, and alter critical server settings. Organizations utilizing Agnaistic Agnai should take immediate steps to remediate this vulnerability to protect their applications from unauthorized access.
Quelle: securityvulnerability.io