{"schemaVersion":1,"id":"CVE-2026-110631","requestedId":"CVE-2026-110631","aliases":[],"status":"published","rawState":"Deferred","rawSeverityStatus":"Deferred","duplicateOf":null,"indexable":true,"title":null,"description":"Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_public_keys and passkeys lists fail open by default. Attackers reaching port 8120 can present any generated keypair to issue Periphery API requests, including terminal sessions and container operations, executing commands on managed hosts typically as root.","dates":{"published":"2026-10-14T14:17:05.199Z","modified":"2026-10-14T15:28:39.257Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"cve.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"cve.org","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"cve.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"nvd","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"nvd","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","evidence":[]},"exploits":[],"exploitCount":0,"exploitSources":[],"weaknesses":[{"id":"CWE-1188","name":"Initialization of a Resource with an Insecure Default","description":"The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1188.html","capec":[{"id":"CAPEC-665","name":"Exploitation of Thunderbolt Protection Flaws","url":"https://capec.mitre.org/data/definitions/665.html"}],"techniques":[{"id":"T1211","name":"Exploitation for Stealth","url":"https://attack.mitre.org/techniques/T1211/","tactics":[{"id":"TA0005","name":"Stealth"}]},{"id":"T1542.002","name":"Component Firmware","url":"https://attack.mitre.org/techniques/T1542/002/","tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0110","name":"Persistence"}]},{"id":"T1556","name":"Modify Authentication Process","url":"https://attack.mitre.org/techniques/T1556/","tactics":[{"id":"TA0031","name":"Credential Access"},{"id":"TA0110","name":"Persistence"},{"id":"TA0112","name":"Defense Impairment"}]}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FBA","name":"Firmware Behavior Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FBA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEMC","name":"Firmware Embedded Monitoring Code","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FEMC/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-FV","name":"Firmware Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FV/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-MBT","name":"Memory Boundary Tracking","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-MBT/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-PCSV","name":"Process Code Segment Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PCSV/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSEP","name":"Process Segment Execution Prevention","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-PSEP/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SAOR","name":"Segment Address Offset Randomization","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SAOR/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-SFCV","name":"Stack Frame Canary Validation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SFCV/"},{"id":"D3-SSC","name":"Shadow Stack Comparisons","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SSC/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]}],"ttp":{"capecs":[{"id":"CAPEC-665","name":"Exploitation of Thunderbolt Protection Flaws","url":"https://capec.mitre.org/data/definitions/665.html","weaknessIds":["CWE-1188"],"techniqueIds":["T1211","T1542.002","T1556"]}],"techniques":[{"id":"T1211","name":"Exploitation for Stealth","url":"https://attack.mitre.org/techniques/T1211/","weaknessIds":["CWE-1188"],"capecIds":["CAPEC-665"],"tactics":[{"id":"TA0005","name":"Stealth"}],"countermeasures":[{"id":"D3-MBT","name":"Memory Boundary Tracking","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-MBT/"},{"id":"D3-PCSV","name":"Process Code Segment Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PCSV/"},{"id":"D3-PSEP","name":"Process Segment Execution Prevention","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-PSEP/"},{"id":"D3-SAOR","name":"Segment Address Offset Randomization","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SAOR/"},{"id":"D3-SFCV","name":"Stack Frame Canary Validation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SFCV/"},{"id":"D3-SSC","name":"Shadow Stack Comparisons","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SSC/"}]},{"id":"T1542.002","name":"Component Firmware","url":"https://attack.mitre.org/techniques/T1542/002/","weaknessIds":["CWE-1188"],"capecIds":["CAPEC-665"],"tactics":[{"id":"TA0005","name":"Stealth"},{"id":"TA0110","name":"Persistence"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-FBA","name":"Firmware Behavior Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FBA/"},{"id":"D3-FEMC","name":"Firmware Embedded Monitoring Code","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FEMC/"},{"id":"D3-FV","name":"Firmware Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FV/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]},{"id":"T1556","name":"Modify Authentication Process","url":"https://attack.mitre.org/techniques/T1556/","weaknessIds":["CWE-1188"],"capecIds":["CAPEC-665"],"tactics":[{"id":"TA0031","name":"Credential Access"},{"id":"TA0110","name":"Persistence"},{"id":"TA0112","name":"Defense Impairment"}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]}],"countermeasures":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FBA","name":"Firmware Behavior Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FBA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEMC","name":"Firmware Embedded Monitoring Code","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FEMC/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-FV","name":"Firmware Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FV/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-MBT","name":"Memory Boundary Tracking","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-MBT/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-PCSV","name":"Process Code Segment Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PCSV/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSEP","name":"Process Segment Execution Prevention","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-PSEP/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"},{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SAOR","name":"Segment Address Offset Randomization","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SAOR/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-SFCV","name":"Stack Frame Canary Validation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SFCV/"},{"id":"D3-SSC","name":"Shadow Stack Comparisons","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SSC/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-PSEP","name":"Process Segment Execution Prevention","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-PSEP/"},{"id":"D3-SAOR","name":"Segment Address Offset Randomization","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SAOR/"},{"id":"D3-SFCV","name":"Stack Frame Canary Validation","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SFCV/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"}]},{"tactic":"Detect","items":[{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FBA","name":"Firmware Behavior Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FBA/"},{"id":"D3-FEMC","name":"Firmware Embedded Monitoring Code","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FEMC/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-FV","name":"Firmware Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FV/"},{"id":"D3-MBT","name":"Memory Boundary Tracking","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-MBT/"},{"id":"D3-PCSV","name":"Process Code Segment Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PCSV/"},{"id":"D3-PLA","name":"Process Lineage Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PLA/"},{"id":"D3-PSA","name":"Process Spawn Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSA/"},{"id":"D3-PSMD","name":"Process Self-Modification Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PSMD/"},{"id":"D3-SFA","name":"System File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SFA/"},{"id":"D3-SSC","name":"Shadow Stack Comparisons","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SSC/"}]},{"tactic":"Isolate","items":[{"id":"D3-ABPI","name":"Application-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-ABPI/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-HBPI","name":"Hardware-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-HBPI/"},{"id":"D3-KBPI","name":"Kernel-based Process Isolation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-KBPI/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-SCF","name":"System Call Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-SCF/"},{"id":"D3-WSAM","name":"Web Session Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-WSAM/"}]},{"tactic":"Evict","items":[{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-HR","name":"Host Reboot","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HR/"},{"id":"D3-HS","name":"Host Shutdown","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-HS/"},{"id":"D3-PS","name":"Process Suspension","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PS/"},{"id":"D3-PT","name":"Process Termination","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-PT/"}]},{"tactic":"Restore","items":[{"id":"D3-RC","name":"Restore Configuration","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RC/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"}]},{"tactic":"Deceive","items":[{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"}]},{"tactic":"Model","items":[{"id":"D3-AM","name":"Access Modeling","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AM/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CI","name":"Configuration Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-CI/"},{"id":"D3-NTPM","name":"Network Traffic Policy Mapping","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-NTPM/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]}]},"affected":[{"vendor":"moghtech","product":"komodo","name":"komodo","label":"komodo","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"source":null,"versions":[{"text":"≤ 2.3.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.3.3","eol":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/moghtech/komodo/issues/1690","label":"github.com/moghtech/komodo/issues/1690","hostname":"github.com","tags":["Issue Tracking"],"sources":["cve.org","nvd"]},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/state.rs#L82-L88","label":"github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/state.rs","hostname":"github.com","tags":["Technical Description"],"sources":["cve.org","nvd"]},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/connection/server.rs","label":"github.com/moghtech/komodo/blob/v2.3.3/bin/periphery/src/connection/server.rs","hostname":"github.com","tags":["Technical Description"],"sources":["cve.org","nvd"]},{"url":"https://github.com/moghtech/komodo/blob/v2.3.3/config/periphery.config.toml","label":"github.com/moghtech/komodo/blob/v2.3.3/config/periphery.config.toml","hostname":"github.com","tags":["Technical Description"],"sources":["cve.org","nvd"]},{"url":"https://github.com/moghtech/komodo/blob/v1.19.5/bin/periphery/src/api/router.rs","label":"github.com/moghtech/komodo/blob/v1.19.5/bin/periphery/src/api/router.rs","hostname":"github.com","tags":["Technical Description"],"sources":["cve.org","nvd"]},{"url":"https://www.vulncheck.com/advisories/komodo-through-2.3.3-periphery-agent-unauthenticated-rce-via-default-configuration","label":"www.vulncheck.com/advisories/…","hostname":"www.vulncheck.com","tags":["Third Party Advisory"],"sources":["cve.org","nvd"]},{"url":"https://ravindulakmina.pages.dev/advisories/komodo-periphery-fail-open-rce/","label":"ravindulakmina.pages.dev/advisories/komodo-periphery-fail-open-rce/","hostname":"ravindulakmina.pages.dev","tags":["Technical Description"],"sources":["cve.org","nvd"]}],"droppedReferenceCount":0,"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-14T14:17:05.199Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-14T15:28:39.257Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"default","profileName":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10},"appliedRules":["high-cvss-alone"]},"warnings":[],"meta":{"dataAsOf":"2026-10-14T21:22:31.643Z","stale":false,"partial":false}}