CVE-2026-97231: volotat Anagnorisis Socket.IO Connect app.py missing authentication
A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
volotat Anagnorisis versions up to 0.3.1 and 0.4.0 are identified as affected. The issue is in the Socket.IO Connect Interface associated with app.py.
Can this be exploited remotely without credentials?
Yes. The vulnerability is remotely exploitable and is rated with no privileges required and no user interaction required.
Is public exploit information available?
Yes. A public exploit has been disclosed and could be used.
What is the expected impact of successful exploitation?
Successful exploitation may affect confidentiality, integrity, and availability at a low level. The reported severity is high, with a CVSS score of 7.3.