Skip to content
OpenAdvisories

Vendor

AIDotNet

1 known vulnerabilities.

Products

OpenDeepWiki 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119597

    OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery

    OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin…

    AIDotNet OpenDeepWiki