---
id: CVE-2026-108753
title: >-
  Agnaistic agnai through 1.0.555 contains a hard-coded credentials
  vulnerability in self-host.docker-compose.yml, which sets a fixed admin
  password and public JWT secret
summary: >-
  Agnaistic agnai through 1.0.555 contains a hard-coded credentials
  vulnerability in self-host.docker-compose.yml, which sets a fixed admin
  password and public JWT secret. Unauthenticated attackers can log in as admin
  or sign their own JWT…
severity: critical
cvss: 9.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L'
cwe:
  - CWE-798
published: '2026-10-11'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T13:17:20.237'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108753'
references:
  - url: 'https://github.com/agnaistic/agnai'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/README.md#L75-L82
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/self-host.docker-compose.yml#L18-L26
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/agnaistic/agnai/blob/6c3de258cb33999c3f292c71aa031d2352681186/srv/api/auth.ts#L11-L14
    label: disclosure@vulncheck.com
  - url: 'https://hackmd.io/@haind/agnai-selfhost-compose-hardcoded-admin-jwt-secret'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/agnaistic-agnai-through-1.0.555-hard-coded-credentials-in-self-host-docker-compose
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-11T13:51:17.039Z'
---

## Overview

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can log in as admin or sign their own JWT with admin: true to impersonate users, reset passwords, and change server configuration.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.