PT-2026-30318

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.4.10 Description A hardcoded JWT signing secret in LightRAG allows authentication bypass, potentially leading to unauthorized access. The default JWT secret 'lightrag-jwt-default-secret' is used if the TOKEN SECRET...