Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

Summary

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass. This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.

Remediation

1. Inventory every Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally deployment, including staging.
2. Upgrade Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally to 0ef61f2e.
3. Confirm the running version after the upgrade.

References

• Referencehttps://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1408