Vulnerability · Published Jan 13, 2026 · Assigned by VulnCheck
CVE-2020-36911Covenant 0.5 - Remote Code Execution (RCE)
Critical 9.8
In plain English
A critical-severity hard-coded credentials in Covenant from Cobbr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 12.3% (higher than 96% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)12.3%top 3.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.
Affected products (as reported)
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- ExploitDB-51141 exploit
- Vendor Homepage product
- Covenant GitHub Repository product
- Archived Researcher Blog technical-description, exploit
- Exploit Repository exploit
- Archived Maintainer Patch Announcement vendor-advisory, patch
- VulnCheck Advisory: Covenant 0.5 - Remote Code Execution (RCE) third-party-advisory