This vulnerability (CVE-2025-60639) concerns the presence of hardcoded credentials within the gsigel14 ATLAS-EPIC codebase, specifically introduced or identified in commit f29312c on 2025-05-26. Hardcoded credentials (CWE-798) can lead to unauthorized access if discovered by attackers. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, no privileges or user interaction required, and impacts confidentiality and integrity but not availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

The vulnerability allows attackers to potentially access systems or data by using hardcoded credentials, compromising confidentiality and integrity. Since the attack vector is network-based with no required privileges or user interaction, exploitation could be straightforward if the credentials are discovered. However, availability is not impacted. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review the codebase for hardcoded credentials and remove or replace them with secure credential management practices. Monitor for vendor updates or patches addressing this issue.