#NØØT_Security_Alerts 🚨 #ALERT — CRITICAL AGNAI FLAW EXPOSES SELF-HOSTED AI SERVERS TO ADMINISTRATOR TAKEOVER October 11, 2026 DISCLOSED BY: VulnCheck PRODUCT: Agnaistic agnai — Self-Hosted AI Application CVE: CVE-2026-108753 SEVERITY: Critical — CVSS 9.3 (v4) AFFECTED VERSIONS: agnai 1.0.555 and earlier. Affected deployments use the hard-coded credentials supplied in self-host.docker-compose.yml. IMPACT: The self-hosted deployment configuration exposes a fixed administrator password and publicly known JWT signing secret. Unauthenticated remote attackers can authenticate using the default administrator credentials or forge JWT tokens containing administrator privileges. Successful exploitation can enable user impersonation, unauthorized password resets, and modification of server configuration. EXPLOITATION STATUS: CONFIRMED VULNERABILITY. The affected configuration and authentication implementation are publicly documented. Active malicious exploitation remains unverified. Forensic triage: Inspect unexpected administrator logins, suspicious JWT claims, unexplained password resets, unauthorized configuration changes, and unusual API activity. No confirmed malicious IOCs have been published. URGENT ACTION: Immediately replace default administrator credentials and JWT secrets. Restrict administrative access to trusted networks. Invalidate existing sessions, review account changes, and investigate potentially unauthorized administrative operations. Do not expose unchanged example deployments to the internet. SOURCE: https://www.vulncheck.com/advisories/agnaistic-agnai-through-1.0.555-hard-coded-credentials-in-self-host-docker-compose CONFIDENCE: HIGH — VulnCheck vulnerability disclosure supported by publicly accessible upstream configuration and authentication code. No confirmed in-the-wild exploitation. #CyberSecurity #ThreatIntel #AISecurity #AuthenticationBypass #AccessControl #SelfHosted