CVE-2026-100164: User Enumeration in Rolantis Information Technologies' Agentis
Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.
This issue affects Agentis: before 4.8.
Event History
Frequently Asked Questions
Which deployments are affected?
Agentis versions before 4.8 are affected. The available information does not identify specific deployment modes, modules, or configurations.
What does an attacker need to exploit this issue?
The vector is network-based, with low attack complexity and no required privileges or user interaction. An attacker can use observable response differences to determine whether accounts exist.
What is the security impact?
The issue enables account footprinting, exposing account-existence information. The provided CVSS vector indicates high confidentiality impact and no stated integrity or availability impact.
How can I determine whether I am affected?
Check the deployed Agentis version. Systems running a version earlier than 4.8 should be treated as affected.