The vulnerability arises from hard‑coded credentials embedded in app.config.ts. When an attacker manipulates request input, the application may use these preset credentials to authenticate, allowing unauthorized access to protected resources. The flaw in the JWT Token Handler enables an attacker to gain privileged access without legitimate credentials.

The issue affects refly‑ai’s refly component, up to version 1.1.0, where the JWT Token Handler processes app.config.ts. No further vendor or product details are available beyond the refly‑ai:refly designation.

The CVSS score of 6.9 indicates moderate severity. EPSS data is unavailable, so the exploitation probability is currently unknown. The vulnerability is not yet listed in CISA’s KEV catalog. The flaw can be triggered remotely, as the attack vector involves manipulating input that the application processes via its API layer, making it accessible from an external network.