CVE-2026-64866 QuantumNous CVE debrief

Who should care

Administrators and security teams responsible for managing and securing LLM gateway and AI asset management systems should assess exposure and verify remediation. This includes reviewing administrator roles and privileges, monitoring system logs for potential exploitation attempts, and ensuring that the system is updated to version 1.0.0-rc.7 or later. Additionally, defenders should consider implementing compensating controls for exposed systems and track

Why it matters

CVE-2026-64866 allows lower-privileged administrators to remove passkeys from higher-privileged accounts, potentially leading to unauthorized privilege escalation and increased risk of lateral movement within multi-administrator environments. Defenders should verify and remediate this vulnerability, especially in systems with multiple administrators.

• Potential unauthorized privilege escalation through passkey removal.
• Increased risk of lateral movement within multi-administrator environments.
• Need for verification of administrator role configurations and passkey management.

Technical summary

The AdminResetPasskey function in controller/passkey.go lacked the canManageTargetRole authorization check for DELETE /api/user/:id/reset_passkey, allowing a lower-privileged administrator to remove a passkey from a same-level or higher-privileged account, including a root account. This issue was fixed in version 1.0.0-rc.7. The vulnerability could lead to unauthorized privilege escalation and increased risk of lateral movement within multi-administrator environments. Defenders should verify and remediate this vulnerability, especially in systems with multiple administrators.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in their systems, especially those with multi-administrator setups.

Recommended defensive actions

• Verify the version of the LLM gateway and AI asset management system in use and ensure it is updated to 1.0.0-rc.7 or later.
• Review administrator roles and privileges to prevent exploitation.
• Monitor system logs for potential exploitation attempts.
• Perform a thorough review of system configurations and administrator roles to ensure that the vulnerability is not being exploited.
• Consider implementing compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, its impact, and the fixed version. However, the scope of affected systems and potential exposure are not explicitly stated. Defenders should verify the version of the LLM gateway and AI asset management system in use and review administrator roles and privileges to prevent exploitation. The source reference commit 0936e2504655a5cbf7bc3c388f6d3e2bb24916d3 and pull request 4929 provide additional context on the vulnerability and fix.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.