CVE-2026-92717 — Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT…
Published: 2026-09-16 · CVSS: 9.3 · CVSS 4.0
Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing unauthenticated callers to invoke CreateHttpListener and receive a signed JWT token. Attackers can use the obtained token to authenticate against the entire operator API and access grunts, credentials, binaries, events, and the operator roster.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7