CVE-2026-92546
HIGHCVSS 7.5/10
Last modified
CVE-2026-92546 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e..
Description
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Keepnet Labs Cybersecurity Inc. | Agentic AI / Agentic Ally | < 0ef61f2e |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-92546?
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.
This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.
How severe is CVE-2026-92546?
CVE-2026-92546 has a CVSS score of 7.5/10 (HIGH severity).
How do I fix CVE-2026-92546?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-92539A service account with user-management permissions in one or…6.7
- CVE-2026-9254An unauthenticated OS command injection vulnerability exists…8.7
- CVE-2026-92540The Import and export users and customers WordPress plugin b…7.2
- CVE-2026-92541The Import and export users and customers WordPress plugin b…7.2
- CVE-2026-92542The firewall rules which mark VXLAN datagrams for encryption…6.9
- CVE-2026-92543Docker Engine classifies a registry hostname as insecure usi…7.6
- CVE-2026-92548The WP Popular Posts plugin for WordPress is vulnerable to S…5.3
- CVE-2026-9255Missing input source validation in the tool authorization pr…8.4
- CVE-2026-92550A pre-authentication attacker could leverage type size/count…7.5
- CVE-2026-92551The Paid Membership Plugin, Ecommerce, User Registration For…6.1
- CVE-2026-92553The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Repor…8.8
- CVE-2026-92554The ShopLentor – All-in-One WooCommerce Growth & Store Enhan…6.1
Are you affected by CVE-2026-92546?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST