{"metadata": {"vulnerability": "CVE-2026-111322", "count": 21, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111322", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-15T20:27:21.718Z", "date_only": false, "value": "2026-10-15T20:27:21.718Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111322", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:43:31.045Z", "date_only": false, "value": "2026-10-15T21:43:31.045Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111322", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T21:43:31.045Z", "date_only": false, "value": "2026-10-15T21:43:31.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111322", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T22:01:31.993Z", "date_only": false, "value": "2026-10-15T22:01:31.993134Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447176453837156", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "8913eb0b-ea48-41d0-98f9-dcd28277cd96", "content": "CVE-2026-111322 Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111322https://hackmd.io/@hieuPenguinnn/archon-os-api-missing-authentication-defaulthttps://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/routes/api.ts#L1749-L1756https://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/auth/config.ts#L25-L27https://github.com/coleam00/Archon/blob/v0.11.1/packages/server/src/index.ts#L909https://github.com/coleam00/Archonhttps://www.vulncheck.com/advisories/archon-0.2.13-through-0.11.1-missing-authentication-via-api-control-api#coleam00 #Archon#CVE_2026_111322#bot", "url": "https://infosec.exchange/users/cve/statuses/117447176453837156"}, {"timestamp": "2026-10-15T22:19:30Z", "date_only": false, "value": "2026-10-15T22:19:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3Q7P-HHHJ-QH4P", "record": "GHSA-3Q7P-HHHJ-QH4P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:19:30.633Z", "date_only": false, "value": "2026-10-15T22:19:30.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111322", "record": "FKIE_CVE-2026-111322", "field": "published"}, {"timestamp": "2026-10-15T23:17:57.711Z", "date_only": false, "value": "2026-10-15T23:17:57.711648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx73265sq2k", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "5a96ca85-6aff-4b93-a723-cdfd359af4ea", "content": "\ud83d\udd34 CVE-2026-111322 - Critical (9.8)\n\nArchon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-111322/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxx73265sq2k"}, {"timestamp": "2026-10-15T23:40:05.556Z", "date_only": false, "value": "2026-10-15T23:40:05.556177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxxacmx6sm2l", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "3ac5b0f5-512b-4aed-a948-6c2ff63e35e3", "content": "CVE-2026-111322 - archon\nVersions 0.2.13 through 0.11.1 of Archon expose a control interface that does not require a login. Anyone who can reach the server over the network can send messages that cause the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#archon #coleam00 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxxacmx6sm2l"}, {"timestamp": "2026-10-16T00:08:21.661Z", "date_only": false, "value": "2026-10-16T00:08:21.661206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxxbv6m5da2l", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "1c1ad513-9c9f-4640-b995-40b59ec1ed25", "content": "\ud83d\udea8 CVE-2026-111322 \u2014 CVSS 9.3 CRITICAL\n\nArchon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated at...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111322\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxxbv6m5da2l"}, {"timestamp": "2026-10-16T00:31:56Z", "date_only": false, "value": "2026-10-16T00:31:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3Q7P-HHHJ-QH4P", "record": "GHSA-3Q7P-HHHJ-QH4P", "field": "published"}, {"timestamp": "2026-10-16T00:31:56Z", "date_only": false, "value": "2026-10-16T00:31:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3Q7P-HHHJ-QH4P", "record": "GHSA-3Q7P-HHHJ-QH4P", "field": "modified"}, {"timestamp": "2026-10-16T03:00:25.574Z", "date_only": false, "value": "2026-10-16T03:00:25.574778Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117448351733786731", "record": "cve-2026-111322", "field": "creation_timestamp", "uuid": "38373d89-a96c-4a8b-829d-4d8cca014379", "content": "CVE-2026-111322 (CRITICAL): coleam00 Archon 0.2.13 \u2013 0.11.1 lacks auth on /api/*, risking remote command execution by unauthenticated users. Restrict API access & monitor; patch status unknown. https://radar.offseq.com/threat/cve-2026-111322-missing-authentication-for-critical-function-in-coleam00-archon-2baeaa2e1000cf2d #OffSeq #Vulnerability #CVE2026111322", "url": "https://infosec.exchange/users/offseq/statuses/117448351733786731"}, {"timestamp": "2026-10-16T03:00:28.159Z", "date_only": false, "value": "2026-10-16T03:00:28.159183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxxlivj23s2m", "record": "cve-2026-111322", "field": "creation_timestamp", "uuid": "0c5b5a9f-41f2-4b13-99f9-cfbb2c8f7c73", "content": "coleam00 Archon 0.2.13 \u2013 0.11.1: CRITICAL auth bypass on /api/* enables remote code execution. Restrict API access ASAP & check vendor for fixes. https://radar.offseq.com/threat/cve-2026-111322-missing-authentication-for-critical-function-in-coleam00-archon-2baeaa2e1000cf2d #OffSeq #Vulnerability...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mxxlivj23s2m"}, {"timestamp": "2026-10-16T05:35:07.919Z", "date_only": false, "value": "2026-10-16T05:35:07.919443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxxu5f5sd22o", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "581054be-a370-41fc-b240-eb0abf941c40", "content": "Meanwhile. Archon's coding agent bound /api to 0.0.0.0 with no auth. CVE-2026-111322. LAN strangers talk to the agent, it runs shell with bypassPermissions. You built a genius intern and put the desk in the parking lot. (burp) day289.014", "url": "https://bsky.app/profile/alienrick.xyz/post/3mxxu5f5sd22o"}, {"timestamp": "2026-10-16T05:42:20.736Z", "date_only": false, "value": "2026-10-16T05:42:20.736403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxxujqootc2w", "record": "CVE-2026-111322", "field": "creation_timestamp", "uuid": "77ff3994-1b88-440d-b890-e6083f7b81a9", "content": "Meanwhile. Archon's coding agent bound /api to 0.0.0.0 with no auth. CVE-2026-111322. LAN strangers talk to the agent, it runs shell with bypassPermissions. You built a genius intern and put the desk in the parking lot. (burp) day289.014", "url": "https://bsky.app/profile/alienrick.xyz/post/3mxxujqootc2w"}, {"timestamp": "2026-10-16T19:41:15.852Z", "date_only": false, "value": "2026-10-16T19:41:15.852229Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111322", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-16T19:41:15.852Z", "date_only": false, "value": "2026-10-16T19:41:15.852229Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111322", "record": "FKIE_CVE-2026-111322", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T19:41:55.935Z", "date_only": false, "value": "2026-10-16T19:41:55.935Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111322", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T19:41:55.935Z", "date_only": false, "value": "2026-10-16T19:41:55.935Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-111322", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T20:17:20.237Z", "date_only": false, "value": "2026-10-16T20:17:20.237", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111322", "record": "FKIE_CVE-2026-111322", "field": "lastModified"}]}