coleam00 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL coleam00 CVE published 2026-10-15

CVE-2026-111322

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-15T21:43:31.045Z and has not been modified since then. The missing authentication vulnerability in Archon 0.2.13 through 0.11.1 allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by default. Attackers with network access can send messages to the AI coding agent [truncated]