EUVD-2026-62407
GHSA-rqm4-4g3h-95wm
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H because exploitation depends on a non-default operator configuration (auth disabled plus non-loopback binding); PR:N since the accepted anonymous identity needs no credentials, with full C/I/A impact via read/write/federation.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
stigmem versions before 0.9.0a2 allow unauthenticated access when authentication is disabled on non-loopback deployments. Attackers can perform read, write, and federation operations with anonymous identity when nodes are exposed outside local development environments.
AnalysisAI
Anonymous read/write/federation access to Stigmem nodes (versions before 0.9.0a2) is possible when operators disable authentication and bind the node to a non-loopback address, effectively bypassing authorization for the anonymous identity. Reported by VulnCheck and disclosed via GHSA-fp6w-8wpg-74g5, it affects the eidetic-labs stigmem-node package (pip). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the node to be running with authentication explicitly disabled AND bound to a non-loopback address (any interface other than loopback/127.0.0.1); under that exact combination an unauthenticated attacker with network reachability gains the anonymous identity's full read, write, and federation capabilities. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The published CVSS 4.0 base score is 9.2 (AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H) - network vector, no privileges, no user interaction, and high confidentiality/integrity/availability impact, which is why the raw score is critical. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An operator spins up a Stigmem node with authentication disabled for convenience and binds it to a routable interface so teammates can reach it. An attacker who can reach that address connects with no credentials, is treated as the anonymous identity, and performs read, write, and federation operations - reading or tampering with stored memory state and pivoting into federated nodes. … |
| Remediation | Vendor-released patch: 0.9.0a2, which now refuses unauthenticated operation outside loopback-only local development; upgrade with 'pip install --upgrade --pre stigmem-node' (or 'pip install --upgrade --pre stigmem[node]' if using the meta-package). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all stigmem-node deployments for authentication settings and network binding configurations, identifying any instances running with authentication disabled or bound to non-loopback addresses. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Federation peer-registration authentication bypass in stigmem-node 0.9.0a1 lets a network-positioned attacker enroll a r
Cleartext exposure of federation traffic in eidetic-labs stigmem-node (versions before 0.9.0a2) occurs when operators ex
Cross-tenant broken object level authorization (BOLA) in stigmem-node exposes quarantined facts across tenant boundaries
SQL injection in stigmem-node 0.9.0a1 stems from PostgreSQL schema identifiers being interpolated into SQL strings witho
Arbitrary code execution is possible in stigmem-node versions before 0.9.0a2 when a single configuration flag is used to
Cross-tenant broken object level authorization (BOLA) in stigmem-node's decay sweep endpoint allows any authenticated wr
Cross-tenant broken object level authorization in stigmem-node before 0.9.0a12 allows an authenticated tenant in a multi
Availability disruption in stigmem-node 0.9.0a1 (pip package by eidetic-labs) allows authenticated federation peers to h
Blind Server-Side Request Forgery in Stigmem before 0.9.0a11 allows authenticated users to redirect the application serv
Same weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today