Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
ID: eec1d06d-ae46-50e4-886d-0e8bbcaf6ccc
STIX ID: report--eec1d06d-ae46-50e4-886d-0e8bbcaf6ccc
Feed Name: Security Affairs
Threat Score
A critical authentication-bypass and remote-code-execution vulnerability (CVE-2026-61500, CVSS 9.3) in Rejetto HTTP File Server (HFS 3.0.0–3.2.0) was discovered using AI-assisted analysis (Anthropic Mythos) and validated with an SMT solver (Z3); attackers have begun limited reconnaissance probing in the wild, enabling account takeover and arbitrary command execution via predictable Math.random() outputs and session-cookie forgery.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.