CVE-2020-36911

CVE-2020-36911 is a critical remote code execution vulnerability affecting Covenant versions 0.1.3 through 0.5. It allows unauthenticated attackers to forge JWT tokens with administrative privileges, enabling them to upload malicious DLL payloads and execute arbitrary commands on the target system. With a CVSS score of 9.8 (Critical), this vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and complete compromise potential. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has received minimal community discussion.