Archon
An open-source workflow engine that provides a control API and workflow orchestration capabilities for coding agents. It supports driving agent execution, sessions and approval processes through REST interfaces.
Timeline (last 90 days)
The Archon project's SECURITY.md advises: when deploying the server publicly, please use an authenticated Caddy reverse proxy.
Before the fix, the vulnerability could be mitigated by setting the environment variable HOST=127.0.0.1 to bind Archon to the loopback address.
Enabling Archon authentication requires configuring both a Postgres URL and a signing secret of at least 32 characters (BETTER_AUTH_SECRET).
Under the default installation of the open-source workflow engine Archon, the /api/* control API has no authentication and is bound to 0.0.0.0.
VulnCheck released CVE-2026-111322 on October 15, affecting Archon versions >= 0.2.13, <= 0.11.1.
As of publication, the latest version of the Archon project remains at v0.11.1, and the GitHub security page has not yet listed any official fix announcement.
Archon's server determines its bind address in index.ts via `const hostname = process.env.HOST || '0.0.0.0';`, with a default port of 3090.
Archon's Web authentication is disabled by default and is only enabled when both Postgres's DATABASE_URL and BETTER_AUTH_SECRET are present.
Under a default installation with no credentials, any client that can access port 3090 can start workflow runs, create sessions and inject messages, approve or reject actions paused by the Agent, and connect or disconnect provider keys.
The Peking University mathematics team is one of the earliest research teams in the world to lay out the AI for Math direction, has built a complete technical chain covering FATE, Matlas/LeanSearch, and Rethlas/Archon/Danus/Iteris, previously successfully conquered the Anderson conjecture, and recently independently completed the formal verification work of the Poincaré conjecture.
1 more timeline events
All Facts (11)
The Archon project's SECURITY.md advises: when deploying the server publicly, please use an authenticated Caddy reverse proxy.
50%UnverifiedUnder a default installation with no credentials, any client that can access port 3090 can start workflow runs, create sessions and inject messages, approve or reject actions paused by the Agent, and connect or disconnect provider keys.
50%UnverifiedBefore the fix, the vulnerability could be mitigated by setting the environment variable HOST=127.0.0.1 to bind Archon to the loopback address.
50%UnverifiedEnabling Archon authentication requires configuring both a Postgres URL and a signing secret of at least 32 characters (BETTER_AUTH_SECRET).
50%UnverifiedUnder the default installation of the open-source workflow engine Archon, the /api/* control API has no authentication and is bound to 0.0.0.0.
50%UnverifiedAs of publication, the latest version of the Archon project remains at v0.11.1, and the GitHub security page has not yet listed any official fix announcement.
50%UnverifiedArchon's server determines its bind address in index.ts via `const hostname = process.env.HOST || '0.0.0.0';`, with a default port of 3090.
50%UnverifiedArchon's Web authentication is disabled by default and is only enabled when both Postgres's DATABASE_URL and BETTER_AUTH_SECRET are present.
50%UnverifiedThe Peking University mathematics team is one of the earliest research teams in the world to lay out the AI for Math direction, has built a complete technical chain covering FATE, Matlas/LeanSearch, and Rethlas/Archon/Danus/Iteris, previously successfully conquered the Anderson conjecture, and recently independently completed the formal verification work of the Poincaré conjecture.
50%UnverifiedArchon is a harness-building tool open-sourced by the blogger, and the hundreds of tests conducted this week were all run on it.
50%UnverifiedVulnCheck released CVE-2026-111322 on October 15, affecting Archon versions >= 0.2.13, <= 0.11.1.
50%