agnai vulnerabilities

2 known vulnerabilities in agnai from Agnaistic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  agnai: Use of Hard-coded Credentials

  CVE-2026-108753Oct 11, 2026Agnaistic

  Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to im

• 8.8 High severity

  agnai: Path Traversal: '.../...//'

  CVE-2024-47169Sep 26, 2024Agnaistic

  Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the e