Threats affecting pkg:golang/Keploy

Keploy versions 3.1.0 through 3.6.25 have a missing authentication vulnerability in the agent control-plane HTTP server, which is bound to all interfaces without access controls. This exposes sensitive endpoints that allow attackers to retrieve TLS session keys and manipulate recording sessions. The flaw is fixed in version 3.6.26.