Skip to content
Threat Feed
Subscribe

Product

Act

1 brief RSS
high advisory

Authentication Bypass and Artifact Manipulation in 'act' HTTP Artifacts V4 Backend

The 'act' tool's HTTP Artifacts V4 backend suffers from an authentication bypass and hardcoded HMAC key vulnerability (CVE-2026-76847), allowing unauthorized network actors to access, modify, or delete artifacts and exfiltrate secrets.

act
1t 1c