---
id: "CVE-2026-92546"
kind: "vulnerability"
aliases: ["CVE-2026-92546"]
title: "Keepnet Agentic Ally: authentication bypass by spoofing before commit 0ef61f2e"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["agentic-ai", "ai-tooling", "keepnet"]
not_affected_if: []
published_at: "2026-10-27T13:17:02+00:00"
first_seen_at: "2026-10-27T13:31:51+00:00"
updated_at: "2026-10-27T13:32:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92546", "first_seen_at": "2026-10-27T13:31:51+00:00"}]
---

# Keepnet Agentic Ally: authentication bypass by spoofing before commit 0ef61f2e

Keepnet Labs' Agentic AI / Agentic Ally product before commit 0ef61f2e has an authentication bypass caused by spoofing. An attacker can likely get past login checks and act as another user, though the sources do not say exactly which identity is spoofed.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- unknown

## Fix

- Update Keepnet Agentic AI / Agentic Ally to a build at or after commit `0ef61f2e`, per the vendor.

## Timeline

- 2026-10-27T13:31:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92546

## From the sources

Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.

This issue affects Agentic AI / Agentic Ally: before 0ef61f2e.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_