Vantage6: Set admin user and password from environment or configuration (CVE-2026-54445)
Vantage6 versions prior to 5.0.0 create an initial administrative user with a default username 'root' and password 'root'. This default credential is weak and widely known, increasing the risk that attackers could gain administrative access if the password is not changed. No official patch is available, but a workaround involves deleting the default 'root' user after creating other users. A temporary mitigation includes setting the initial root password via an environment variable or configuration file to avoid using the default password.
AI Analysis
Technical Summary
Vantage6 before version 5.0.0 initializes an administrative user with the username 'root' and a default password 'root'. This practice exposes the system to potential unauthorized access because the default credentials are predictable and may be left unchanged by administrators. There is no official patch available for this vulnerability. A recommended workaround is to delete the default 'root' user after creating other users. Additionally, a temporary patch allows setting the initial root password from an environment variable or a file, reducing the risk of using default credentials.
Potential Impact
The vulnerability allows attackers to potentially gain administrative access to Vantage6 servers due to the use of a well-known default username and weak password. This could lead to unauthorized control over the system if the default credentials are not changed. There are no known exploits in the wild at this time.
Mitigation Recommendations
No official patch is currently available. Administrators should delete the default 'root' user after creating other users to mitigate the risk. Alternatively, configure the initial root password via an environment variable or configuration file as a temporary workaround to avoid using the default weak password.
Vantage6: Set admin user and password from environment or configuration (CVE-2026-54445)
Description
Vantage6 versions prior to 5.0.0 create an initial administrative user with a default username 'root' and password 'root'. This default credential is weak and widely known, increasing the risk that attackers could gain administrative access if the password is not changed. No official patch is available, but a workaround involves deleting the default 'root' user after creating other users. A temporary mitigation includes setting the initial root password via an environment variable or configuration file to avoid using the default password.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Vantage6 before version 5.0.0 initializes an administrative user with the username 'root' and a default password 'root'. This practice exposes the system to potential unauthorized access because the default credentials are predictable and may be left unchanged by administrators. There is no official patch available for this vulnerability. A recommended workaround is to delete the default 'root' user after creating other users. Additionally, a temporary patch allows setting the initial root password from an environment variable or a file, reducing the risk of using default credentials.
Potential Impact
The vulnerability allows attackers to potentially gain administrative access to Vantage6 servers due to the use of a well-known default username and weak password. This could lead to unauthorized control over the system if the default credentials are not changed. There are no known exploits in the wild at this time.
Mitigation Recommendations
No official patch is currently available. Administrators should delete the default 'root' user after creating other users to mitigate the risk. Alternatively, configure the initial root password via an environment variable or configuration file as a temporary workaround to avoid using the default weak password.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fgmc-2hqj-86v4
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-54445"]
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a50ba6d68715ace4357fb45
Added to database: 07/10/2026, 09:25:01 UTC
Last enriched: 07/10/2026, 09:51:15 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 21
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.