CVE-2026-61737

9.8 CRITICALpublic exploit available

Published 2026-10-30 · Updated 2026-10-30

AI risk analysis

Summary: A hardcoded JWT secret in ng-antd-admin prior to v22.0 allows attackers to forge authentication tokens, bypassing login and impersonating any user including admins, leading to full system compromise.
Exploitability: Trivial to exploit if the default JWT secret is unchanged; no authentication or user interaction required.
Blast radius: Complete account takeover, data exfiltration, and unauthorized administrative actions across all affected deployments using the default secret.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to ng-antd-admin v22.0 or later, which rejects the default secret in production and warns in non-production environments.

jwt-forgeryauth-bypasshardcoded-secrettoken-abuse

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any user including administrators, and access protected API endpoints, leading to account takeover, data leakage and unauthorized operations. Version 22.0 rejects the shipped secret in production but permits it with a warning in non-production environments.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-321

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.