Archon: Missing authentication in control API enables command execution

Summary

Archon versions 0.2.13 through 0.11.1 expose the /api/* control API without authentication. The API binds to 0.0.0.0 by default, so anyone with network access to the host can reach it. An attacker can send messages to the AI coding agent, which runs with bypassPermissions, and thereby execute commands as the Archon user.

Affected

• coleam00 Archon 0.2.13 through 0.11.1
• The CVE record marks the default configuration as unaffected, which conflicts with the description that the API binds to 0.0.0.0 by default. Clarify with the vendor.

Fixed in

Unknown. No fixed version or vendor advisory was found. v0.11.1 is the last affected version.

Workaround

• Restrict network access to the Archon API port to trusted hosts using firewall rules
• Bind the service to localhost and block the port at the host firewall. This limits exposure but adds no authentication.
• Run Archon in a constrained container or a low-privilege account to limit what a compromise can reach

Exploitation

• CISA SSVC lists exploitation as 'poc', automatable as 'yes' and technical impact as 'total'.
• Secondary sources report no public proof of concept and no known exploitation in the wild as of mid-October 2026.

Our recommendation

• Inventory all Archon installations, including Docker images, on servers, shared development hosts and container networks
• Restrict access to the API port now using firewall rules, and bind the service to localhost where possible
• Check logs for unexpected messages to the agent
• Watch the vendor releases page for a fixed version and update promptly
• Treat hosts running Archon as exposed and review the credentials and cloud keys the Archon user can reach

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• VulnCheck advisory www.vulncheck.com
• Archon GitHub repository github.com
• Archon v0.11.1 auth/config.ts github.com
• Archon v0.11.1 routes/api.ts github.com
• Archon v0.11.1 index.ts github.com
• Root cause analysis (hieuPenguinnn) hackmd.io
• CortexFlow lockdown guidance cortexflow.tech

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 01:34.