CyberSecBulletin

AIDotNet vulnerabilities

We track 1 vulnerability in AIDotNet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest AIDotNet vulnerabilities

  • 9.8 Critical severity

    OpenDeepWiki: Use of Hard-coded Cryptographic Key

    CVE-2026-119597AIDotNet

    OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin