CVE-2026-111322

Summary

Archon contains a missing authentication vulnerability that allows unauthenticated attackers to access its control API and execute commands as the Archon user. This is a critical flaw because it enables remote code execution without any authentication requirements.

Exploitability

Exploitation is straightforward requiring only network access to the API endpoint, with no prerequisites beyond the vulnerable version range.

Blast radius

The impact could be severe across all systems running vulnerable Archon versions, as attackers can execute arbitrary commands as the Archon user with potentially elevated privileges.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Archon 0.11.2 or later to fix this authentication bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.