Agentic Ai Agentic Ally
Monthly
Authentication bypass in Keepnet Labs Agentic AI / Agentic Ally lets a network-reachable, unauthenticated attacker spoof an identity and reach functionality that should require authentication, with a high confidentiality impact and no stated integrity or availability effect (CVSS 3.1 base 7.5, CWE-290). Every deployment running a build before commit 0ef61f2e is affected, and the practical exposure is bounded by how widely this niche product is deployed and internet-facing rather than by any attacker prerequisite. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis; the vendor has published a fix point at commit 0ef61f2e, and the vulnerability is prioritized as this_week.
Authentication bypass in Keepnet Labs Agentic AI / Agentic Ally lets a network-reachable, unauthenticated attacker spoof an identity and reach functionality that should require authentication, with a high confidentiality impact and no stated integrity or availability effect (CVSS 3.1 base 7.5, CWE-290). Every deployment running a build before commit 0ef61f2e is affected, and the practical exposure is bounded by how widely this niche product is deployed and internet-facing rather than by any attacker prerequisite. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis; the vendor has published a fix point at commit 0ef61f2e, and the vulnerability is prioritized as this_week.