CVE-2025-69443

6.3 mediumEPSS 0.3%

Remote Code Execution in coleam00 Archon 0.1.0. A crafted HTML page, when accessed by a victim, can execute commands, run prompts on behalf of the user, control the Archon UI features, and steal all Archon information available on the UI including API keys.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2026-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/coleam00/Archon
https://www.ox.security/blog/archon-remote-code-execution
https://www.ox.security/blog/cve-2025-69443-archon-os-vulnerable-to-unauthenticated-web-to-client-attack/

Check your stack JSON