โ† ุงู„ุนูˆุฏุฉ ู„ู„ุฌุฏูˆู„
CVE-2026-111322
CVE-2026-111322 - Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API
๐Ÿ“… 2026-10-16 01:19:30
๐ŸŸก Medium ๐Ÿ”ฅ No MITRE CVE High AI Attack AI/LLM

๐Ÿ“‹ ุงู„ูˆุตู ุงู„ูƒุงู…ู„

CVE ID :CVE-2026-111322 Published : 15 octobre 2026 22:19 | 5ย heures, 30ย minutes ago Description :Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissio

๐Ÿ’ป ุงู„ุฃู†ุธู…ุฉ ุงู„ู…ุชุฃุซุฑุฉ

โš ๏ธ ู†ูˆุน ุงู„ุชู‡ุฏูŠุฏ

AI Attack

๐Ÿ”— CVE ID

CVE-2026-111322

๐Ÿ“ก ุงู„ู…ุตุฏุฑ

MITRE CVE High

โœ… ุงู„ุญู„ูˆู„ ูˆุงู„ุชุฎููŠู

Refer to CVE-2026-111322 NVD advisory

๐Ÿ”— ุงู„ู…ุตุฏุฑ ุงู„ุฃุตู„ูŠ โ† ๐Ÿ“˜ NVD โ† โšก CISA KEV โ† ๐Ÿ” Valters IT โ†