CVE-2026-108549

Summary

The cc-connect application has a critical authentication bypass vulnerability in its MAX platform adapter webhook mode that allows unauthenticated remote attackers to forge privileged updates and execute shell commands on the host. This occurs when no webhook_secret is configured, making the webhook listener on port 8080 completely open to unauthorized modifications.

Exploitability

Exploitation is straightforward for remote attackers who can reach port 8080, requiring no authentication credentials or preconditions beyond network access to the webhook endpoint.

Blast radius

The vulnerability could lead to full system compromise as attackers can execute arbitrary shell commands with admin privileges, potentially allowing them to gain complete control over the host system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable webhook mode in MAX platform adapter or configure a webhook_secret immediately, as no fixed version is published for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.