CVE-2026-116747
highKener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded…
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key. When KENER_SECRET_KEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to access /manage/api with full administrative privileges or forge password-reset tokens.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/rajnandan1/kener disclosure@vulncheck.com
- https://github.com/rajnandan1/kener/blob/v4.1.9/src/lib/server/controllers/commonControlle... disclosure@vulncheck.com
- https://github.com/rajnandan1/kener/commit/ff636483544c926eab5b5e3e26b811c0f52bcaf8 disclosure@vulncheck.com
- https://github.com/rajnandan1/kener/issues/871 disclosure@vulncheck.com
- https://github.com/rajnandan1/kener/releases/tag/v4.1.10 disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/kener-3.0.0-before-4.1.10-authentication-bypass-via-h... disclosure@vulncheck.com