CVE-2025-69443

MediumCVSS 6.3

Published: 14/05/2026(UTC)Updated: 04/11/2026(UTC)Translated: 04/11/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys.

Risk Assessment

An attacker can take control of the Archon UI, perform unauthorized actions on behalf of the user, and access sensitive data such as API keys, potentially leading to further breaches.

Recommendation

Update Archon to a patched version or implement sandboxing for the UI. Rotate API keys and monitor for unusual UI activity.

Other vulnerabilities in Archon

CVE-2026-111322Critical
Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent, which runs with bypassPermissions, to execute commands on the host as the Archon user.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS