CVE-2026-117564

Summary

A hardcoded JWT secret in .env.production allows unauthenticated attackers to forge valid administrator tokens, bypassing authentication entirely.

Exploitability

Trivial to exploit; requires only knowledge of the exposed secret and ability to craft a JWT signed with it.

Blast radius

Full system compromise is possible: attackers can impersonate any user—including admins—and gain unrestricted access to all administrative functions.

Detection

Look for JWT tokens signed with the known leaked secret in authentication headers; detect anomalous admin-role claims (e.g., role: 'admin') issued by non-admin endpoints or from IPs outside normal access patterns.

Prioritized remediation

Upgrade to nest-admin version 1.0.1 or later, which removes the hardcoded secret and enforces secure secret management.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.