CVE-2026-61737— ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

Quick assessment

Affected

huajian123 ng-antd-admin

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ng-antd-admin 是一个基于 Angular 和 NestJS 的后台管理系统模板。在 22.0 版本之前，系统使用硬编码的默认密钥；若部署时未替换该默认密钥，且启动时未发出警告，攻击者即可伪造令牌。这将导致攻击者绕过身份验证与授权机制，冒充任意用户（包括管理员），访问受保护的 API 接口，进而引发账户接管、数据泄露以及未授权操作等严重后果。自 22.0 版本起，系统在生产环境中会拒绝使用该内置默认密钥，而在非生产环境中则允许使用但会发出警告。

CVSS 9.8 · Critical Updated Oct 31, 2026

Possible ATT&CK Techniques 2 AI

T1551 T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

Source: CVE Program / CVE List V5

Vulnerability Description

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any user including administrators, and access protected API endpoints, leading to account takeover, data leakage and unauthorized operations. Version 22.0 rejects the shipped secret in production but permits it with a warning in non-production environments.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

使用硬编码的密码学密钥

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
huajian123	ng-antd-admin	< 22.0	-

II. Public POCs for CVE-2026-61737

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-61737

请登录查看更多情报信息。

Other References for CVE-2026-61737 (3)

https://github.com/huajian123/ng-antd-admin/releases/tag/v22.0 x_refsource_MISC
https://github.com/huajian123/ng-antd-admin/security/advisories/GHSA-qphq-m2hv-wj5h x_refsource_CONFIRM
https://github.com/huajian123/ng-antd-admin/commit/23e92ff9176074ee534af3ea3700b3652a9726a9 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-61737

IV. Related Vulnerabilities

Same weakness: CWE-321