What happened
A security analysis of refly, an open-source AI coding/agent workspace, found JWT signing credentials hard-coded in the API config module, letting remote attackers forge authenticated tokens. Despite contact, the vendor had not responded and no remediation was published at disclosure time.
Why it matters
Refly is an AI-agent workspace where users expose code generation, repo access and LLM API credentials; a hard-coded signing secret that lets a remote attacker mint valid session tokens defeats the authentication boundary guarding AI tooling and any connected LLM/provider keys.
Attack vector
The JWT Token Handler in app.config.ts ships hard-coded credentials used to sign/verify session tokens; a remote attacker can use the known secret to mint tokens that pass validation and gain access to the application's authenticated surfaces.
Affected systems
refly-ai refly up to and including 1.1.0 (apps/api/src/modules/config/app.config.ts JWT handler)
Mitigation
No vendor fix as of publication; restrict network exposure, rotate any derived secrets, and monitor for forged-token activity until the vendor responds.