CVE-2026-40177

Password bypass when 2FA is activated PUBLISHED

Description (CNA)

ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly. Prior to 0.112, if the 2FA was activated, it was possible to bypass the password authentication This vulnerability is fixed in 0.112.

Affected (CNA)

Vendor / product	Versions
ajenti / ajenti	affected < 0.112

CWE

CWE-287

References

https://github.com/ajenti/ajenti/security/advisories/GHSA-3mcx-6wxm-qr8v

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.