CVE-2026-101052

HighCVSS 7.3

Published: 28/09/2026(UTC)Updated: 28/09/2026(UTC)Translated: 28/09/2026(UTC)NVD NIST

Summary

A security vulnerability has been detected in refly-ai refly up to 1.1.0 affecting some unknown processing of apps/api/src/modules/config/app.config.ts of the JWT Token Handler component. Manipulation with the input 'test' leads to hard-coded credentials.

Risk Assessment

The attack may be initiated remotely, and the exploit has been publicly disclosed, potentially leading to unauthorized access.

Recommendation

Update refly to the latest version if available, or remove hard-coded credentials from the configuration.

Other vulnerabilities in refly

CVE-2026-91199Medium
Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address. Authenticated attackers can make the backend issue requests to loopback, private, and link-local addresses including cloud metadata services to read page titles and descriptions of internal resources.

Original NVD description (English source)

A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/app.config.ts of the component JWT Token Handler. The manipulation with the input test leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS