# Xerj Console API Auth Bypass Enables Persistence

Published: 2026-10-20 · Severity: routine · Sectors: Technology
Canonical: https://vorant.io/reports/7ac73220-9798-5168-9eff-1693c843a9e1/xerj-console-api-auth-bypass-enables-persistence

> Unpatched flaw in Xerj's console API lets attackers mint successor tokens that survive revocation, bypassing passkey/MFA requirements.

CERT/CC has published VU#645818 describing CVE-2026-97406, an authentication bypass in Xerj, an open-source search and indexing engine built for AI agents using the Elasticsearch API. The flaw arises because Xerj collapses both browser sessions and API bearer tokens into a single generic AuthSession object, and its token-creation endpoint fails to verify whether the underlying session was actually established via a passkey-backed authentication flow as required by the documented security contract.

An attacker who obtains or intercepts a valid Xerj API token can call the token creation endpoint directly to mint an independent successor token carrying the same privileges as the original, without ever completing passkey authentication. Because Xerj lacks hierarchical revocation, revoking the compromised parent token does not invalidate any descendant tokens it spawned, giving the attacker durable access. If the compromised token belongs to an account owner, the successor token retains full administrative rights, enabling the attacker to issue a new account invitation, redeem it themselves, and enroll an attacker-controlled passkey — granting permanent administrative control over the Xerj instance and its data indices.

No evidence of in-the-wild exploitation is noted. The vendor could not be reached to coordinate disclosure and no patch is currently available. Defenders running Xerj should monitor the project's GitHub repository for a fix, audit for unexpected token-creation events or newly enrolled passkeys/invitations, and treat any exposed or leaked Xerj API token as a potential full-compromise event requiring full account/credential rotation rather than simple token revocation.

## Mentioned in this report

- Vulnerabilities: CVE-2026-97406

Source reporting: https://kb.cert.org/vuls/id/645818

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/7ac73220-9798-5168-9eff-1693c843a9e1/xerj-console-api-auth-bypass-enables-persistence.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup