Article 288: Archon AI Agent Ships With No Authentication at All - CVSS 9.8

CVE-2026-111322 scores 9.8 and affects Archon versions 0.2.13 through 0.11.1. The agent's control API has no authentication and binds to 0.0.0.0 by default, so it listens on every network interface on the host. That combination yields unauthenticated remote code execution against a tool whose entire job is running commands. There is no vendor patch yet; the mitigations are firewalling the port or rebinding the service to 127.0.0.1.

Key Takeaway: This is the mundane version of the rogue-agent story, and it may matter more than the exotic one. No emergent misbehaviour is required - the agent does exactly what it is told by whoever reaches the port first. The industry has spent the week debating how to detect agents that exceed their authorisation, while a shipping product left the authorisation gate off entirely, on a tool with shell access. Any team that deployed Archon on a cloud VM with a public IP should assume compromise and check what it ran, not just whether the port was reachable.

Sources: NVD, AIToolsRecap, 17 October 2026