---
id: "CMP-202611-3clfry"
kind: "campaign"
aliases: []
title: "Backdoored ARTEX Docker image (tomicdd/artex) gives anyone an unauthenticated root shell on servers running the AI hacking tool"
severity: "critical"
cvss: null
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "ARTEX", "fixed": [], "package": "tomicdd/artex", "ecosystem": "Docker Hub"}, {"name": "ARTEX", "fixed": [], "package": "congdonglinux/artex", "ecosystem": "Docker Hub"}]
ecosystems: []
tags: ["campaign", "early-warning"]
not_affected_if: []
published_at: null
first_seen_at: "2026-11-05T09:11:41+00:00"
updated_at: "2026-11-05T09:11:43+00:00"
sources: [{"source": "analyst", "url": "https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html", "first_seen_at": "2026-11-05T09:11:41+00:00", "cites": ["https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html"]}]
exploit_sources: []
---

# Backdoored ARTEX Docker image (tomicdd/artex) gives anyone an unauthenticated root shell on servers running the AI hacking tool

After ARTEX's developer pulled the AI pentest framework from GitHub, a copy at github.com/trhhubsd/ARTEXX (2,449 stars, 600+ forks) changed docker-compose.yml to pull the Docker Hub image tomicdd/artex (about 9,000 pulls). Its login handler has a hidden verifyCaptcha() routine: a CAPTCHA value starting with a secret marker runs as root via sh -c before any credential check. congdonglinux/artex is identical. 62 internet-facing ARTEX consoles served the backdoored build from 2 to 4 Nov 2026, the first by 20 Oct 2026 (26 US, 17 Hong Kong, 7 China). Found by researcher Badbyte and reported by The Hacker News. Whether anyone has used the backdoor is unknown, but anyone holding it gets the instance's targets, findings, credentials and sessions.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- Docker Hub:ARTEX affected range not listed fixed no fixed version listed
- Docker Hub:ARTEX affected range not listed fixed no fixed version listed

## How to check

Look for ARTEX deployments whose docker-compose.yml or running containers use the image tomicdd/artex or congdonglinux/artex, or were cloned from github.com/trhhubsd/ARTEXX (also check mhtsec/ARTEX = mianhuatang11/artex and RuoJi6/ARTEX copies). In the login handler code, look for a verifyCaptcha() function that passes the CAPTCHA field to sh -c. In login endpoint logs, look for odd CAPTCHA values. Other 'artex' images on Docker Hub (autumn26, andy1099zz, dgddw, trhhubsd, ylh440104, mianhuatang11) are unvetted, and the source does not say whether they are backdoored. The secret marker string is unknown.

## Fix

Stop and isolate any ARTEX instance built from these images or copies, and take it off the internet. Treat the host and everything the instance held as compromised: rotate the credentials, sessions and API keys stored in it or reachable from it, and rebuild the host. Do not run unvetted ARTEX copies, and never expose the console publicly or run it as root.

## Timeline

- 2026-11-05T09:11:41+00:00 analyst https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html

## Documents

- [describes] @TheHackersNews: ‼️ A backdoored AI hacking tool is exposing servers to root access without authe https://x.com/TheHackersNews/status/2118263059991134550
- [describes] Backdoored Docker Image for ARTEX AI Hacking Tool Exposes Servers to Root Access https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_