CVE-2026-116747
Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
rajnandan1 kener
CVSS
9.2CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
What fixes it
- 4.1.10kenerCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Reports 3
1 outlet mention it. Reports are not confirmation; each links to its source.
- @threatroundup.bsky.social: 🚨 Critical: CVE-2026-116747 in rajnandan1 kener, CVSS 9.2. Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to… No puBluesky: CVE posts, 26 Oct 2026
- @stackflag.bsky.social: CVE-2026-116747 - kener The Kener software versions before 4.1.10 use a built‑in secret key when no custom key is set. Because of this, anyone who knows an admin email can create aBluesky: CVE posts, 26 Oct 2026
- @cve.skyfleet.blue: CVE-2026-116747 - Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret CVE ID : CVE-2026-116747 Published : Oct. 26, 2026, 9:52 p.m. | 8 minutes ago DeBluesky: CVE posts, 26 Oct 2026
Description
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key. When KENER_SECRET_KEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to access /manage/api with full administrative privileges or forge password-reset tokens.
Text from CVE List
Affected versions 1
- keneraffected: 3.0.0 before 4.1.10CVE List
References 6
- github.com/rajnandan1/kener/commit/ff636483544c926eab5b5e3e26b811c0f52bcaf8Fixvia CVE List
- github.com/rajnandan1/kener/releases/tag/v4.1.10Fixvia CVE List
- vulncheck.com/advisories/kener-3.0.0-before-4.1.10-authentication-bypass-via-hardcoded-fallback-jwt-secretAdvisoryvia CVE List
- github.com/rajnandan1/kener/issues/871Referencevia CVE List
- github.com/rajnandan1/kenerReferencevia CVE List
- github.com/rajnandan1/kener/blob/v4.1.9/src/lib/server/controllers/commonController.ts#L44-L55Referencevia CVE List