Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:opendeepwiki:opendeepwiki:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

OpenDeepWiki: Hard-coded JWT signing key vulnerability (CVE-2026-119597)

OpenDeepWiki versions up to 2.0.6 include a hard-coded JWT signing key, allowing unauthenticated attackers to forge administrative tokens and gain full application control.

OpenDeepWiki authentication web-application cve-2026-119597
2t 1c