Archon vulnerabilities

CVEs whose affected-version data names the Archon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111322Critical· 9.8

yesterday

Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to th…

▾ Midnightcoleam00 · Archonvia CVEORG