CVE-2026-92546 PUBLISHED

Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

Assigner: TR-CERT
Reserved: 16.09.2026 Published: 27.10.2026 Updated: 27.10.2026

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.

This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Product Status

Vendor Keepnet Labs Cybersecurity Inc.
Product Agentic AI / Agentic Ally
Versions Default: unaffected
  • affected from 0 to 0ef61f2e (excl.)

Credits

  • Caglar Cakici finder

References

Problem Types

  • CWE-290 Authentication bypass by spoofing CWE

Impacts

  • CAPEC-115 Authentication Bypass