Vulnerabilities

TI-2026-70731 CVE-2026-108753 · GHSA-jvxj-gpfv-vg4v

Hard-coded credentials in Agnaistic agnai Docker Compose setup

HIGH 81

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00439 Published 2026-10-11 No fix listed CWE-798

TI-2024-31539 CVE-2024-47171 · GHSA-g54f-66mw-hv66

Agnai vulnerable to Relative Path Traversal in Image Upload

LOW 21

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00495 Published 2024-09-26 Fixed in 1.0.330 CWE-35

TI-2024-31538 CVE-2024-47170 · GHSA-h355-hm5h-cm8h

Agnai File Disclosure Vulnerability: JSON via Path Traversal

LOW 22

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00468 Published 2024-09-26 Fixed in 1.0.330 CWE-35

TI-2024-31537 CVE-2024-47169 · GHSA-mpch-89gm-hm83

Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal

HIGH 73

Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00785 Published 2024-09-26 Fixed in 1.0.330 CWE-35

Vulnerabilities

Filters

Hard-coded credentials in Agnaistic agnai Docker Compose setup

Agnai vulnerable to Relative Path Traversal in Image Upload

Agnai File Disclosure Vulnerability: JSON via Path Traversal

Agnai vulnerable to Remote Code Execution via JS Upload using Directory Traversal