What is the CVSS score of CVE-2020-36911?

CVE-2020-36911 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.8%.

Which versions of Covenant are affected by CVE-2020-36911?

Organizations using Covenant 0.1.3 - 0.5 face critical risk from CVE-2020-36911, a hard-coded credentials vulnerability rated CVSS 9.8.

Is there a public PoC exploit available for CVE-2020-36911?

Yes, a public proof-of-concept exploit is available for CVE-2020-36911. Prioritise patching immediately. EPSS: 0.8%.

How to fix or mitigate CVE-2020-36911?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Audit authentication configurations and rotate any potentially compromised credentials.

Covenant CVE-2020-36911

CRITICAL

Use of Hard-coded Credentials (CWE-798)

2026-01-13 disclosure@vulncheck.com

RCE Covenant

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 29, 2026 - 00:56 vuln.today

Public exploit code

CVE Published

Jan 13, 2026 - 23:15 nvd

CRITICAL 9.8

DescriptionCVE.org

Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.

AnalysisAI

Covenant C2 framework (0.1.3-0.5) allows forging JWT tokens with admin roles due to hardcoded credentials. Attackers can upload and execute DLL payloads for RCE. PoC available.

Technical ContextAI

The JWT signing key is hardcoded (CWE-798), allowing attackers to forge tokens with admin roles. With admin access, they can upload custom DLL payloads that execute arbitrary code on the Covenant server.

RemediationAI

Update Covenant. Generate unique JWT signing keys on installation.

CVE-2020-36911 vulnerability details – vuln.today

Back

Covenant CVE-2020-36911

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code