A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. (CVE-2026-105147)

This vulnerability affects SciPhi-AI R2R up to version 3.6.6 in the JWT Secret Handler component. It involves manipulation of the DEFAULT_BCRYPT_SECRET_KEY and DEFAULT_NACL_SECRET_KEY arguments, resulting in hard-coded credentials. The vulnerability can be exploited remotely without authentication, allowing an attacker to impact confidentiality, integrity, and availability. The exploit has been publicly disclosed, but the vendor has not provided any response or patch. No affected versions beyond 'up to 3.6.6' are explicitly stated, and no official remediation is documented.

The vulnerability allows remote attackers to exploit hard-coded credentials in the JWT Secret Handler, potentially compromising confidentiality, integrity, and availability of the affected system. The CVSS 3.1 score of 7.3 reflects a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch links are provided, users should monitor official channels for updates. Until a fix is available, consider restricting network access to the affected component and reviewing usage of the JWT Secret Handler keys to mitigate exposure.