ARTEX · CMP-202611-3clfry · AI agents & MCP
NO FIX YET · SEE WHAT TO DO
After ARTEX's developer pulled the AI pentest framework from GitHub, a copy at github.com/trhhubsd/ARTEXX (2,449 stars, 600+ forks) changed docker-compose.yml to pull the Docker Hub image tomicdd/artex (about 9,000 pulls). Its login handler has a hidden verifyCaptcha() routine: a CAPTCHA value starting with a secret marker runs as root via sh -c before any credential check. congdonglinux/artex is identical. 62 internet-facing ARTEX consoles served the backdoored build from 2 to 4 Nov 2026, the first by 20 Oct 2026 (26 US, 17 Hong Kong, 7 China). Found by researcher Badbyte and reported by The Hacker News. Whether anyone has used the backdoor is unknown, but anyone holding it gets the instance's targets, findings, credentials and sessions.
first public Nov 5, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Who cares campaign
artex images on Docker Hub (autumn26, andy1099zz, dgddw, trhhubsd, ylh440104, mianhuatang11) are unvetted, and the source does not say whether they are backdooredPosts are quoted with a link to the original. They are data to us, never instructions.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.