Agnai Self-Host Compose File Ships Hard-Coded Admin Password and JWT Secret (CVE-2026-108753)

CVE-2026-108753 is a critical (CVSS 3.1: 9.4) hard-coded credentials flaw in Agnaistic agnai through version 1.0.555. If a deployment uses the project's self-host Docker Compose file without changing its default credentials, an unauthenticated attacker can take it over as admin.

What Is It

CVE-2026-108753 is a hard-coded credentials vulnerability (CWE-798) in self-host.docker-compose.yml, which ships with agnai. The file sets a fixed admin password and a public JWT secret. On any deployment that still uses these values, anyone who knows them can either:

• Log in directly as admin using the fixed password, or
• Sign their own JWT with admin: true using the public secret.

VulnCheck disclosed the issue. NVD published the record on 2026-10-11, and its status is currently "Received."

Why It Matters

According to the NVD description, an attacker who exploits this flaw can:

• Impersonate users
• Reset passwords
• Change server configuration

No authentication or user interaction is required. The CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L, which means it can be exploited over the network with low complexity. Impact to confidentiality and integrity is high, and impact to availability is low. VulnCheck's CVSS 4.0 score is 9.3 (Critical).

The risk depends on how each instance was deployed. It applies to self-hosted instances started from the shipped Compose file with its default admin password and JWT secret left in place. Deployments that set their own values may not be exposed in the same way.

Exploitation status: The supplied CISA KEV entry is empty. As of this writing, KEV does not confirm active exploitation. The CVSS 4.0 exploit maturity field is "Not Defined."

What's Vulnerable

• Vendor/Product: Agnaistic agnai
• Package: pkg:npm/agnai
• Repository: github.com/agnaistic/agnai
• Affected versions: 0 through 1.0.555 (semver), inclusive
• Affected component: self-host.docker-compose.yml. The cited references also point to srv/api/auth.ts and the project README's self-host instructions.

The records do not include any CPE entries.

Patch Status

The supplied NVD record does not name a fixed version. It only says versions through 1.0.555 are affected. There is no CISA KEV entry, so there is no KEV-mandated required action or due date. Operators running agnai self-hosted with the provided Compose file should check whether they are still using its default admin password and JWT secret. They should also check the VulnCheck advisory and the upstream repository for remediation guidance and any release that fixes the issue.

Sources

• NVD – CVE-2026-108753
• VulnCheck Advisory – Agnaistic agnai through 1.0.555 Hard-Coded Credentials in Self-Host Docker Compose
• Researcher write-up (HackMD) – agnai self-host compose hard-coded admin/JWT secret
• GitHub – agnaistic/agnai
• GitHub – self-host.docker-compose.yml (L18–L26)
• GitHub – srv/api/auth.ts (L11–L14)
• GitHub – README.md (L75–L82)