Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-103055 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CNA: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/auth.ts#L51-L59	[email protected]	Source CodeVendor
https://github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43	[email protected]	Source CodeVendor
https://github.com/beenuar/AiSOC/releases/tag/v12.0.0	[email protected]	Release NotesVendor
https://github.com/beenuar/AiSOC/security/advisories/GHSA-4m55-xhcm-wjcr	[email protected]	AdvisoryExploitRemedyVendor
https://www.vulncheck.com/advisories/aisoc-7.5.0-before-12.0.0-authentication-bypass-via-hard-coded-jwt-secret	[email protected]	AdvisoryBundleRemedy

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-321	Use of Hard-coded Cryptographic Key	[email protected]

Affected Products

Product	Versions
Beenuar AiSOC	>= 7.5.0, <= 11.2.0 (semver)
CPE No CPEs found in CPE dictionary for this product. Remediation Upgrade: 12.0.0moderate effort Workaround:low effort Set the AISOC_REALTIME_JWT_SECRET environment variable to a secure value for the realtime service.

Change History

1 change record found show changes