EUVD-2026-92093
GHSA-hw45-xf9v-jg9c
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Publicly known hard-coded signing key allows remote unauthenticated JWT forgery (AV:N/PR:N/UI:N/AC:L) yielding full auth bypass, so C:H/I:H; no direct availability impact (A:N).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULT_BCRYPT_SECRET_KEY/DEFAULT_NACL_SECRET_KEY causes hard-coded credentials. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Hard-coded JWT signing secrets in SciPhi-AI R2R through 3.6.6 can let remote unauthenticated attackers forge valid JSON Web Tokens and bypass authentication when a deployment still uses the shipped DEFAULT_BCRYPT_SECRET_KEY or DEFAULT_NACL_SECRET_KEY values. The exposure is configuration-dependent: instances that override both defaults with custom secrets are not vulnerable, and the authentication or API endpoints must be reachable over the network for exploitation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitable only when the R2R deployment runs with the shipped default signing secrets - i.e., operators did NOT override DEFAULT_BCRYPT_SECRET_KEY and DEFAULT_NACL_SECRET_KEY used by the JWT Secret Handler. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a hard-coded credentials flaw (CWE-798) in SciPhi-AI R2R ≤3.6.6, where the JWT Secret Handler falls back to shipped defaults (DEFAULT_BCRYPT_SECRET_KEY/DEFAULT_NACL_SECRET_KEY). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch was identified at time of analysis, and the vendor reportedly did not respond to early contact, so remediation should focus on configuration hardening and exposure reduction. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated stacked SQL injection in SciPhi-AI R2R through version 3.6.6 lets remote attackers execute arbitrary SQL
Unauthenticated SQL injection in SciPhi-AI R2R through version 3.6.6 exposes the application database to blind data exfi
Unauthenticated remote attackers can exploit a server-side request forgery (SSRF) in SciPhi-AI R2R 3.6.6 and earlier by
Insecure Direct Object Reference in R2R's conversation API through version 3.6.5 enables any authenticated user to modif
Same weakness CWE-798 – Use of Hard-coded Credentials
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today