A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. (CVE-2026-108831)

CVE-2026-108831 is a vulnerability in meetecho janus-gateway versions up to 1.4.2 involving hard-coded credentials in the Admin API component (html/demos/admin.js). This flaw allows an attacker with network access to remotely exploit the system due to the presence of hard-coded credentials, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability has been publicly disclosed but no official patch or fix has been documented in the provided data.

The vulnerability allows remote attackers to exploit hard-coded credentials in the Admin API, potentially leading to unauthorized access or control over affected systems. The CVSS score of 6.3 reflects a medium impact on confidentiality, integrity, and availability. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the Admin API component and monitor for unauthorized access attempts. Avoid using affected versions in sensitive environments where possible.