The vulnerability arises because the administrative password in CISA Malcolm is stored using a comparatively weak and fast hashing algorithm in one credential store, and the file containing this hash is accessible to any local user due to permissive file permissions. This is inconsistent with a stronger hashing algorithm used for the same password on another authentication path. An adversary able to read this hash file, including local users or those with access to configuration backups, could perform offline computations to recover the underlying password, thereby compromising administrative credentials across all authentication paths that accept this password.

An attacker with local system access or access to configuration backups can obtain the weakly hashed password file and potentially recover the administrative password through offline attacks. This compromises administrative credentials across all authentication paths that accept the password, potentially allowing unauthorized administrative access.

No patch or official fix is currently documented for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local file access permissions to prevent unauthorized reading of the password hash file and secure configuration backups to limit exposure.