ajenti.plugin.core hat ein Passwort-Bypass wenn 2FA aktiviert ist

Successful exploitation of CVE-2026-40177 allows an attacker to bypass the standard authentication mechanism in Ajenti, even with 2FA enabled. This grants them complete control over the server managed by the panel. The potential impact is severe, including unauthorized modification of server configurations, data exfiltration, installation of malware, and complete system compromise. Given Ajenti's role as a server management interface, this vulnerability could provide a foothold for broader network attacks, enabling lateral movement to other systems within the infrastructure. The blast radius extends to any data or services hosted on the compromised server.

Organizations utilizing Ajenti for system management and configuration, particularly those relying on 2FA for enhanced security, are at significant risk. Environments with legacy Ajenti installations or those lacking robust patching processes are especially vulnerable. Shared hosting environments where multiple users share an Ajenti instance also face increased risk.

• python / server:

import subprocess
result = subprocess.run(['ajenti', '--version'], capture_output=True, text=True)
if result.stdout.strip() < '0.112':
    print('Vulnerable Ajenti version detected!')

1. 2026-04-10Disclosure

   disclosure

1. Reserviert2026-04-09
2. Veröffentlicht2026-04-10
3. Geändert2026-04-14
4. EPSS aktualisiert2026-04-18

The primary mitigation for CVE-2026-40177 is to immediately upgrade Ajenti to version 0.112 or later. If upgrading is not immediately feasible due to compatibility issues or testing requirements, consider temporarily disabling 2FA as a partial mitigation, although this significantly reduces security. While a WAF or proxy cannot directly prevent this bypass, it can be configured to monitor for unusual activity originating from the Ajenti panel after authentication. There are no specific Sigma or YARA rules available at this time, but monitoring Ajenti's access logs for suspicious login attempts is recommended.