CVE-2026-18397: AI Agents Lower the Bar for Exploiting SConnect

Thales Group disclosed CVE-2026-18397 on October 1, 2026, for SConnect, a browser extension with over one million users that serves as hardware authentication middleware for SWIFT banking systems and government portals. The CVSS 4.0 score is 9.4. The vulnerability enables drive-by RCE via a buffer overflow in a custom RSA implementation. Researchers at Bay Area Labs developed the exploit using AI agents, completing it in 6–10 seconds with an ~18% heap-spray success rate. The discovery raises an immediate concern: SConnect reached end-of-life in September 2026, yet many institutions may still rely on it as a fallback.

{"main_topic":"cybersecurity","topics":["vulnerability","cve","rce","exploit","ai","cybersec"]}

Thales Group disclosed CVE-2026-18397 on October 1, 2026, for SConnect, a browser extension with over one million users that serves as hardware authentication middleware for SWIFT banking systems and government portals. According to the source, the CVSS 4.0 score is 9.4: the vulnerability enables drive-by RCE via a buffer overflow in a custom RSA implementation. The exploit, developed with AI agents by Bay Area Labs researchers, completes in 6–10 seconds with an ~18% heap-spray success rate. The discovery raises an immediate concern: SConnect reached end-of-life in September 2026, yet many institutions may still rely on it as a fallback.

Key Takeaways

The buffer overflow resides in a proprietary RSA signature verification implementation that fails to guard against oversized invalid signatures, reading stale data from the buffer.
AI agents equipped with Ghidra and Frida accelerated native-host decompilation and memory analysis for the heap spray, reducing complexity from nation-state level to an automated workflow.
The attack is drive-by: arbitrary web pages or iframes can trigger the exploit without visible user interaction, and failed attempts produce no apparent errors.
Patches were released in August 2026, but the extension is end-of-life: SWIFT's Web Connect replacement has existed since September 2025, yet institutional migration remains incomplete.

A Homegrown RSA Check That Reads Stale Memory

The flaw lies in how SConnect validates RSA digital signatures. According to the source, the code allocates a buffer to hold the RSA computation result but does not protect that space when the supplied signature is invalid and oversized. The computation fails silently without writing to the buffer, yet SConnect proceeds to read the previous contents: a stale buffer that can be manipulated.

Bay Area Labs researchers exploited this condition using heap-spray techniques, injecting byte patterns designed to mimic a valid signature. The result is an authentication bypass that opens the door to loading a malicious DLL and achieving remote code execution. The end-to-end process takes 6–10 seconds, with an ~18% heap-spray success rate.

James Arnott, founder of Bay Area Labs, summarized the issue: "At the end of the day, they implemented a cryptographic check, and they did it themselves. They didn't use a library, and they messed it up." The decision not to rely on standard cryptographic libraries — an internal Thales design choice — is the vehicle for the entire compromise chain.

From Nation-State to Agentic Workflow: AI as Equalizer

The second breakthrough is methodological. Exploit development did not require months of manual reverse engineering. According to the source, researchers employed AI agents armed with Ghidra for native-host decompilation and Frida for dynamic memory analysis. Arnott stated explicitly: "It would have previously required nation-state effort. But when I was developing this exploit, it was very much agent-driven."

The shift is significant for the financial sector's threat model. If the barrier for exploits of this complexity drops to teams with access to automated tooling, the risk surface for legacy middleware expands from state-sponsored actors to a broader range of technical operators. The critical asset — access to SWIFT systems — remains identical, but the profile of potential attackers changes.

The SConnect Ecosystem: One Million Users and a Transition Gap

SConnect operates as a browser extension for platforms requiring hardware authentication, primarily within the SWIFT network but also for government portals such as Qatar Tawtheeq and the Swedish Tax Agency (Skatteverket). The user base exceeds one million on the Chrome Web Store.

The patch timeline is fragmented. Thales released updates on the Apple App Store and Chrome Web Store in August 2026, but removed the extension from Microsoft Edge only in September 2026, coinciding with the end-of-life declaration. SWIFT had already introduced Web Connect as a replacement in September 2025.

The critical point is operational. According to Arnott: "I suspect most people will still have it, if they're using SWIFT, [since] SConnect is the fallback if Web Connect isn't set up already." The source provides no quantitative data on residual SConnect deployment across financial institutions, but the fallback mechanism — triggered automatically when Web Connect is not configured — creates an implicit persistence of risk even after EOL.

"Visit a page with a malicious iframe, then you have been infected. To be honest, from there, you can do pretty much whatever you want."
— James Arnott, Bay Area Labs

Why It Matters

The source does not specify whether the exploit has been observed in the wild outside the Bay Area Labs environment. Researchers could not obtain 3SKey credentials to test the full attack on a live SWIFT system, limiting verification of concrete session-hijacking or fraudulent-transfer scenarios.

The dossier documents no specific mitigations beyond updating or migrating to Web Connect. Thales did not respond to Dark Reading's request for comment at the time of publication. No infrastructure overlaps linking this vulnerability to other CVEs or known campaigns emerge from the source.

The central datum is the convergence of three factors: a widely deployed middleware, a fundamental cryptographic flaw in a proprietary implementation, and the democratization of exploit development via AI agents. The source does not quantify the number of institutions still exposed, but the combination of recent EOL and a fallback mechanism suggests a risk window that remains open.

Questions and Answers

Does the attack require user interaction?

No. The source describes a drive-by attack: malicious web pages or iframes can trigger communication with the SConnect extension without visible user action.

Has the exploit been demonstrated on a real SWIFT system?

No. Bay Area Labs researchers lacked access to 3SKey, preventing end-to-end testing on authentic SWIFT infrastructure. The demonstration stops at local RCE via a malicious DLL.

What is the risk if the extension is already patched or removed?

The August 2026 patch fixes the vulnerability, but the September 2026 removal from Edge and the EOL declaration do not guarantee automatic uninstallation from already-equipped workstations. The source provides no data on the actual update rate across the user base.

Information is based on the cited source and current as of publication.

Sources

Sources and references

Get DeafLetter