CVE-2026-92717

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-92717

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92717.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-92717

Published

2026-09-16T17:31:37Z

Modified

2026-09-18T03:48:42Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

Details

Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts, credentials, binaries, events, and the operator roster.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92717.json"
}

References

Affected packages

Git / github.com/cobbr/covenant

Affected ranges

Type

GIT

Repo

https://github.com/cobbr/covenant

Events

Introduced

Fixed

19e4a17048ade1b854241bb5d938398860ab5981

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.6"
        },
        {
            "fixed": "0.6"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

v0.*

v0.1

v0.1.1

v0.1.2

v0.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92717.json"