CVE-2026-92546: Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally
Published Oct 27, 2026
·Updated
Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.
This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.
Affected Software
1 affected component
Keepnet Labs Agentic AI / Agentic Ally<0ef61f2e
Event History
Oct 27, 2026
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Agentic AI / Agentic Ally deployments with versions before 0ef61f2e are affected.
2
What does an attacker need to exploit this issue?
The supplied vector indicates exploitation can be performed remotely, with low attack complexity, no privileges, and no user interaction. The vulnerability involves spoofing the X-Agentic-Ally-Token header.
3
What is the expected impact of successful exploitation?
Successful exploitation allows authentication bypass and can result in high confidentiality impact. The provided scoring indicates no integrity or availability impact.