CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-108753 — Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability ...

·Source: NIST NVD

Updated:

Executive Summary

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.

Analysis

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration. CVSS Score: 9.4. Published: 2026-10-11T13:17:20.237.

Indicators of Compromise (1)

CVE (1)
CVE-2026-108753
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 11, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

Millions of Exploit Attempts Logged Against PHP Servers

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/millions-exploit-attempts-logged-against-php-servers-image_small-6-a-33179.jpg" align=right hspace=4><b>Urgent PHP Patching Advised as Experts See Widespread Exploit-Building Attempts</b><br>Attacks targeting the critical PHP vulnerabilities dubbed PHP2Shell and patched Wednesday are continuing to mount as hundreds of proof-of-con

Bank Info Security
MEDIUMVulnerability

How bug bounty sharpens one researcher’s security skills

As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team spotlights @r31n, diving into their research approach, favorite bug classes, and advice for aspiring hackers. The post How bug bounty sharpens one researcher’s security skills appeared first on The GitHub Blog .

GitHub Security Blog
MEDIUMVulnerability

The Current Landscape of OAuth Attacks

Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OAuth Attacks appeared first on Unit 42 .

Unit 42 (Palo Alto)