Central Dogma vulnerabilities

2 known vulnerabilities in Central Dogma from LY. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Central Dogma: Use of Hard-coded Credentials

  CVE-2026-11746Jun 22, 2026LY

  A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to a hard-coded, publicly known secret. This default credential

• 8.8 High severity

  Central Dogma: Key Exchange without Entity Authentication

  CVE-2026-11745Jun 22, 2026LY

  A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and c