Agnaistic agnai: Hard-coded admin credentials in Docker Compose file

Summary

The self-hosting Docker Compose file of agnai sets a fixed admin password and a public JWT signing secret. An unauthenticated attacker who knows these defaults can log in as administrator or forge a JWT with admin rights. This allows impersonating users, resetting passwords and changing server configuration.

Affected

• agnai through version 1.0.555
• Deployments that use self-host.docker-compose.yml with the default values

Fixed in

Unknown. No vendor fix or fixed release has been identified.

Workaround

• Replace the fixed admin password and JWT secret in the compose file with random values before the first start
• Do not expose the instance to the internet; place it behind a VPN or an authenticating reverse proxy
• Restrict network access to the instance until the secrets are rotated

Exploitation

• CISA SSVC: exploitation status PoC, automatable: yes, technical impact: total
• VulDB reports no public exploit available but assesses exploitation as easy
• Not known to be exploited in the wild and not listed in CISA KEV

Our recommendation

• Inventory all agnai deployments and search compose files for the default values
• If a deployment with default values was reachable, assume compromise: review admin accounts, user passwords and configuration changes, and check logs
• Change all secrets now and restrict network access
• Monitor the upstream repository for a fixed release and re-check the NVD record once analysis is complete

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• VulnCheck advisory www.vulncheck.com
• Vulnerable compose file (commit 6c3de258) github.com
• Vulnerable auth code (commit 6c3de258) github.com
• HackMD write-up hackmd.io
• VulDB entry vuldb.com
• VulDB exploit status vuldb.com
• OpenCVE entry app.opencve.io
• HOL Guard entry hol.org

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 02:33.