PT-2026-2356 · Cobbr+1 · Covenant

Coastal · Published 2026-01-13 · Updated 2026-01-29 · CVE-2020-36911

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Covenant versions 0.1.3 through 0.5

Description The software contains a remote code execution issue that allows attackers to create malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system. The vulnerability involves crafting JWT tokens to gain unauthorized access and execute code.

Recommendations Update to a newer version that addresses this issue.

Exploit

Fix

RCE

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-36911

Affected Products

Covenant

References · 10

• 🔥 https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51141 · Exploit
• 🔥 https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-hunters · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36911 · Security Note
• https://osv.dev/vulnerability/CVE-2020-36911 · Vendor Advisory
• https://github.com/cobbr/Covenant · Note
• https://vulncheck.com/advisories/covenant-remote-code-execution-rce · Note
• https://cobbr.io/Covenant.html · Note
• https://t.me/cveNotify/150222 · Telegram Post
• https://web.archive.org/web/20201013165001/https://twitter.com/cobbr_io/status/1316058367161401344 · Patch, Vendor Advisory