CVE-2026-116228 | 777genius agent-teams-ai up to 2.17.10 Local HTTP Service HttpServer.ts doStart missing authentication

October 25, 2026 Yanac

A vulnerability was found in 777genius agent-teams-ai up to 2.17.10 and classified as problematic. This issue affects the function doStart of the file src/main/services/infrastructure/HttpServer.ts of the component Local HTTP Service. The manipulation results in missing authentication.

This vulnerability is identified as CVE-2026-116228. The attack is only possible with local access. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More