PT-2026-53363 · Pypi · Ajenti-Plugin-Core

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact

If the 2FA was activated, it was possible to bypass the password authentication

Patches

This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.

Correção

Identificadores relacionados

PYSEC-2026-266

Produtos afetados

Ajenti-Plugin-Core

Referências · 6

• https://github.com/ajenti/ajenti · Nota
• https://github.com/ajenti/ajenti/security/advisories/GHSA-3mcx-6wxm-qr8v · Nota
• https://github.com/advisories/GHSA-3mcx-6wxm-qr8v · Nota
• https://osv.dev/vulnerability/PYSEC-2026-266 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-40177 · Nota de Segurança
• https://pypi.org/project/ajenti-plugin-core · Nota