CyberSecBulletin

Agnaistic vulnerabilities

We track 2 vulnerabilities in Agnaistic products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.

2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score

Latest Agnaistic vulnerabilities

  • 9.4 Critical severity

    agnai: Use of Hard-coded Credentials

    CVE-2026-108753Agnaistic

    Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to im

  • 8.8 High severity

    agnai: Path Traversal: '.../...//'

    CVE-2024-47169Agnaistic

    Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the e