Description
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cobbr | Covenant | >= 0.1.3, <= 0.5 |
References
- https://cobbr.io/Covenant.htmlBroken Link
- https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rbProduct
- https://github.com/cobbr/CovenantProduct
- https://web.archive.org/web/20201013165001/https://twitter.com/cobbr_io/status/1316058367161401344Issue Tracking
- https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-huntersExploit, Third Party Advisory
- https://www.exploit-db.com/exploits/51141Exploit
- https://www.vulncheck.com/advisories/covenant-remote-code-execution-rceThird Party Advisory
- https://github.com/Zeop-CyberSec/covenant_rce/blob/master/covenant_jwt_rce.rbProduct
- https://web.archive.org/web/20201101052547/https://blog.null.farm/hunting-the-huntersExploit, Third Party Advisory
Timeline
- Published
- Jan 13, 2026
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed