CVE-2026-101052

refly-ai refly JWT Token app.config.ts hard-coded credentials

View on CVE.org
Published Sep 28, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Analysis

AI-generated

Technical impact

The vulnerability arises from hard‑coded credentials embedded in app.config.ts. When an attacker manipulates request input, the application may use these preset credentials to authenticate, allowing unauthorized access to protected resources. The flaw in the JWT Token Handler enables an attacker to gain privileged access without legitimate credentials.

Affected Systems

The issue affects refly‑ai’s refly component, up to version 1.1.0, where the JWT Token Handler processes app.config.ts. No further vendor or product details are available beyond the refly‑ai:refly designation.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. EPSS data is unavailable, so the exploitation probability is currently unknown. The vulnerability is not yet listed in CISA’s KEV catalog. The flaw can be triggered remotely, as the attack vector involves manipulating input that the application processes via its API layer, making it accessible from an external network.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade refly‑ai’s refly component to a version newer than 1.1.0 where the hard‑coded credential issue is resolved.
  • Replace any instance of hard‑coded credentials in app.config.ts with securely generated secrets and store them using a protected mechanism such as a secrets manager.
  • Regenerate and rotate all credentials that might have been exposed, and enforce strong authentication practices moving forward.

Generated by OpenCVE AI on September 28, 2026 at 12:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title refly-ai refly JWT Token app.config.ts hard-coded credentials
First Time appeared Refly-ai
Refly-ai refly
Weaknesses CWE-259
CWE-798
CPEs cpe:2.3:a:refly-ai:refly:*:*:*:*:*:*:*:*
Vendors & Products Refly-ai
Refly-ai refly
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-259

    Use of Hard-coded Password

  • CWE-798

    Use of Hard-coded Credentials

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Sep 28, 2026, 12:20 PM
Reserved
Sep 27, 2026, 4:22 PM

View source JSON

Updated
Sep 28, 2026, 12:20 PM

JSON

Status
Deferred
Published
Sep 28, 2026, 12:17 PM
Modified
Sep 28, 2026, 1:17 PM

View source JSON

No data.

Updated
Sep 28, 2026, 4:22 PM

JSON