#agent security

Archon AI coding agent's control API has no login by default — anyone who can reach it can run commands

A critical flaw (CVE-2026-111322) lets anyone who can reach an Archon server instruct its AI coding agent to run commands. No fixed release yet — restrict access now.