{"id":"CVE-2026-108753","published":"2026-10-11T13:17:20.237","lastModified":"2026-10-16T19:18:44.867","description":"Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.","cvssScore":9.4,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","cwes":["CWE-798"],"vendors":[],"products":[],"references":[{"url":"https://github.com/agnaistic/agnai","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/README.md#L75-L82","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/self-host.docker-compose.yml#L18-L26","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/srv/api/auth.ts#L11-L14","tags":[]},{"url":"https://hackmd.io/@haind/agnai-selfhost-compose-hardcoded-admin-jwt-secret","tags":[]},{"url":"https://www.vulncheck.com/advisories/agnaistic-agnai-through-1.0.555-hard-coded-credentials-in-self-host-docker-compose","tags":[]},{"url":"https://hackmd.io/@haind/agnai-selfhost-compose-hardcoded-admin-jwt-secret","tags":[]}],"exploitRefs":[{"url":"https://github.com/agnaistic/agnai","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/README.md#L75-L82","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/self-host.docker-compose.yml#L18-L26","tags":[]},{"url":"https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/srv/api/auth.ts#L11-L14","tags":[]}],"hasPoc":true,"ai":{"summary":"The Agnaistic agnai application contains hard-coded credentials in its Docker Compose configuration that sets a fixed admin password and public JWT secret. This allows unauthenticated attackers to gain administrative access or forge admin-level JWT tokens to impersonate users and modify server settings.","exploitability":"Exploitation is extremely easy with no prerequisites - attackers simply need to access the exposed Docker Compose configuration file to extract the hard-coded credentials and can immediately log in as admin or sign forged JWT tokens.","blast_radius":"The impact could be severe across all installations using the vulnerable version, allowing attackers to fully compromise administrative access, reset user passwords, and modify critical server configurations without any authentication.","remediation":"Immediately upgrade to version 1.0.556 or later to fix the hard-coded credentials vulnerability in self-host.docker-compose.yml.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["credential-exposure","jwt","docker-compose"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:51:14.004Z"}}