HIGH 7.5 PyPI
ajenti.plugin.core has password bypass when 2FA is activated
GHSA-3mcx-6wxm-qr8v · CVE-2026-40177 · PYSEC-2026-266
Published · Modified
Description
Impact
If the 2FA was activated, it was possible to bypass the password authentication
Patches
This is fixed in the version 0.112. Users should upgrade to this version as soon as possible.
Ready to move
Start Securing
Free, no credit card | First findings in minutes