Unauthenticated remote uninstall in my own EDR agent, and the four other auth bugs that turned out to be the same bug
https://d3vhex.github.io/2026-08-25-unauthenticated-remote-uninstall/
Submitted 2026-08-25T19:26:25Z by RevolutionaryPie4948
via reddit https://ift.tt/HkE01nL
Oğuz
Unauthenticated remote uninstall in my own EDR agent, and the four other auth bugs that turned out to be the same bug
A postmortem on my own EDR: no auth on self-destruct, permissive agent keys, forged automation results, LDAP injection, and 8 routes with no authorization check.
August 25, 2026 115 3
