CVE-2026-116747 Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
CriticalCVSS 9.2
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key. When KENER_SECRET_KEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to access /manage/api with full administrative privileges or forge password-reset tokens.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rajnandan1 kener | >= 3.0.0, < 4.1.10 | 4.1.10 |
References
- GitHub Issue #871 issue-tracking
- github.com product
- github.com patch
- kener v4.1.10 Release Notes release-notes
- github.com technical-description
- VulnCheck Advisory: Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret third-party-advisory