{"id":"CVE-2026-100164","kind":"vulnerability","aliases":["CVE-2026-100164"],"related":[],"title":"Rolantis Agentis: observable response lets attackers detect valid accounts","description":"Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.\n\nThis issue affects Agentis: before 4.8.","summary":"Rolantis Agentis, a product from Rolantis Information Technologies, returns responses that differ observably in a way that reveals whether an account exists. An attacker can use this account footprinting to build a list of valid users for later attacks.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["agentis","other","rolantis","self-hosted"],"not_affected_if":[],"how_to_check":"- Check the installed Agentis version and compare it to `4.8`; the sources do not say where the version is shown.\n- unknown","fix":"- Upgrade Agentis to `4.8` or later, as the advisory affects versions before `4.8`.\n- unknown","status":"open","published_at":"2026-10-27T13:16:54+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","triaged_at":"2026-10-27T13:32:18+00:00","updated_at":"2026-10-27T13:32:18+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-27T13:32:18Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Agentis to `4.8` or later, as the advisory affects versions before `4.8`.\n- unknown","reach":"unknown","title":"Rolantis Agentis: observable response lets attackers detect valid accounts","impact":"low","summary":"Rolantis Agentis, a product from Rolantis Information Technologies, returns responses that differ observably in a way that reveals whether an account exists. An attacker can use this account footprinting to build a list of valid users for later attacks.","category":"other","nicknames":[],"who_cares":["agentis","rolantis","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker learns which accounts exist, enabling targeted login attacks","analyst_note":"Check the NVD entry and the vendor advisory for Agentis to confirm the affected endpoint, the auth requirement and the fixed version of 4.8.","how_to_check":"- Check the installed Agentis version and compare it to `4.8`; the sources do not say where the version is shown.\n- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organisations running Agentis versions before 4.8 are affected according to the NVD entry. The sources do not describe the data path or configuration that makes an installation exposed, so teams running newer versions or no Agentis deployment can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000581,"input_tokens":3294,"output_tokens":504,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-100164':12A,15A '-2026':11A,14A '4.8':84C 'account':9A,42B,49B,77C 'affect':81C 'agenti':2A,16B,23B,75C,82C 'allow':76C 'attack':6A,45B,60B 'build':52B 'co':73C 'cve':10A,13A 'detect':7A 'differ':33B 'discrep':63C 'exist':43B 'footprint':50B,78C 'host':21B 'industri':70C 'inform':28B,67C 'issu':80C 'later':59B 'let':5A 'list':54B 'ltd':74C 'observ':3A,34B,61C 'product':25B 'respons':4A,31B,62C 'return':30B 'reveal':39B 'rolanti':1A,18B,22B,27B,66C 'self':20B 'self-host':19B 'technolog':29B,68C 'tourism':69C 'trade':72C 'use':47B 'user':57B 'valid':8A,56B 'vulner':64C 'way':37B 'whether':40B","nicknames":[],"mitigations":[],"who_affected":"Organisations running Agentis versions before 4.8 are affected according to the NVD entry. The sources do not describe the data path or configuration that makes an installation exposed, so teams running newer versions or no Agentis deployment can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T13:16:54+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-100164","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100164","severity":null,"published_at":"2026-10-27T13:16:54+00:00","modified_at":"2026-10-27T13:16:54+00:00","first_seen_at":"2026-10-27T13:31:51+00:00","fetched_at":"2026-10-27T13:31:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}