TI-2026-56979 CVE-2026-82641 · GHSA-wjmh-q7rf-cj53
Keploy 3.1.0-3.6.25 Unauthenticated TLS Key Exposure
Priority HIGH 77
Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data.