CVE-2026-110631: Anyone Could Run Commands on Your Komodo Hosts — Fail-Open Auth in Periphery
Every Komodo Periphery release through 2.3.3 authorizes any client when no keys are configured — the default. Unauthenticated remote code execution as root, across both the v1.x and v2.x architectures. CVSS 9.8.