CVE-2026-101052

Name of the Vulnerable Software and Affected Versions refly-ai refly versions prior to 1.1.1

Description An issue exists in the JWT Token Handler component within the file apps/api/src/modules/config/app.config.ts. Manipulation of the test input can lead to the exposure of hard-coded credentials, allowing a remote attack to be initiated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.