malcontent discovers supply-chain compromises through.context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference.malcontent uses google/go-containerregistry for OCI image pulls, which by default uses the Docker credential keychain. A malicious registry could return a `WWW-Authenticate` header redirecting token authentication to an attacker-controlled endpoint, causing credentials to be sent to that endpoint. Version 1.20.3 fixes the issue by defaulting to anonymous auth for OCI pulls.
Password Confirmation Bypass vulnerability in Omada Controllers, allowing an attacker with a valid session token to bypass secondary verification, and change the user’s password without proper confirmation, leading to weakened account security.
Typebot is an open-source chatbot builder. In versions prior to 3.13.2, client-side script execution in Typebot allows stealing all stored credentials from any user. When a victim previews a malicious typebot by clicking "Run", JavaScript executes in their browser and exfiltrates their OpenAI keys, Google Sheets tokens, and SMTP passwords. The `/api/trpc/credentials.getCredentials` endpoint returns plaintext API keys without verifying credential ownership. Version 3.13.2 fixes the issue.
Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version.
Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.
Insufficiently Protected Credentials vulnerability in the Credential Field of Milner ImageDirector Capture allows retrieval of credential material and enables database access.This issue affects ImageDirector Capture: from 7.0.9 through 7.6.3.25808.
PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.
CVE-2026-23742 is a high-severity code injection vulnerability in Zalando's Skipper HTTP router and reverse proxy versions prior to 0.23.0. The vulnerability arises from the default configuration allowing inline Lua scripts (-lua-sources=inline,file), which can be exploited if untrusted users can create Lua filters, for example via Kubernetes Ingress resources. Exploitation enables attackers with limited privileges to execute arbitrary Lua code, potentially reading the filesystem accessible to the Skipper process, including sensitive logs and secrets. This can lead to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability requires at least low privileges (PR:L) but no user interaction and can be exploited remotely over the network. The issue is fixed in version 0.23.0.
The vulnerability exists in BLUVOYIX due to an improper password storage implementation and subsequent exposure via unauthenticated APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable users API to retrieve the plaintext passwords of all user users. Successful exploitation of this vulnerability could allow the attacker to gain full access to customers' data and completely compromise the targeted platform by logging in using an exposed admin email address and password.
CVE-2025-69271 is a vulnerability in Broadcom DX NetOps Spectrum versions 24.3.13 and earlier that involves insufficient protection of credentials, leading to potential sniffing attacks. The flaw allows attackers with low privileges and partial authentication to intercept sensitive credential data transmitted over the network. Although the CVSS score is low (2.3), the vulnerability could expose credentials if exploited, impacting confidentiality. No known exploits are currently reported in the wild, and no patches have been released yet. The vulnerability affects both Windows and Linux deployments of DX NetOps Spectrum, a network management solution widely used in enterprise environments. European organizations relying on this product for network operations could face risks of credential exposure, especially in sectors with critical infrastructure. Mitigation should focus on network segmentation, encryption of management traffic, and strict access controls to limit exposure.
CVE-2025-62327 is a medium severity vulnerability in HCL DevOps Deploy versions 8.1 through 8.1.2.3, where users with LLM configuration privileges can recover previously saved credentials used for authenticated LLM queries. The vulnerability stems from insufficient protection of stored credentials (CWE-522). Exploitation requires privileged access but no user interaction and can lead to credential disclosure, impacting confidentiality. There are no known exploits in the wild yet. The CVSS score is 4.9, reflecting a moderate risk primarily due to the need for elevated privileges.
CVE-2025-67732 is a high-severity vulnerability in langgenius' open-source LLM app development platform, Dify, affecting versions prior to 1.11.0. The issue involves exposure of the API key in plaintext on the frontend, allowing non-administrator users to access and reuse it without authorization. This can lead to unauthorized access to third-party services, potentially exhausting service quotas or causing service disruptions. The vulnerability requires no user interaction and can be exploited remotely with low complexity. The flaw impacts confidentiality by exposing sensitive credentials and could indirectly affect availability by depleting service quotas. The vendor fixed the issue in version 1.11.0 by removing API key exposure.
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions prior to and including v4.0.0-beta.434, low privileged users are able to see the private key of the root user on the Coolify instance. This allows them to ssh to the server and authenticate as root user, using the private key. As of time of publication, it is unclear if a patch is available.
Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these headers when unsuspecting users connect to it. Maintainers anticipate a patch in a 4.1 release. Workarounds exist for 4.0.x versions. Using `custom_location_directives` in `ood_portal.yml` in version 4.0.x (not available for versions below 4.0) centers can unset and or edit these headers. Note that `OIDCPassClaimsAs both` is the default and centers can set `OIDCPassClaimsAs ` to `none` or `environment` to stop passing these headers to the client. Centers that have an OIDC provider with the `OIDCPassClaimsAs` with `none` or `environment` settings can adjust the settings using guidance provided in GHSA-2cwp-8g29-9q32 to unset the mod_auth_openidc_session cookies.
CVE-2025-14148 is a medium severity vulnerability in IBM UCD - IBM DevOps Deploy versions 8.1 through 8.1.2.3. It allows an authenticated user with LLM integration configuration privileges to recover a previously saved LLM API token due to insufficient credential protection (CWE-522). The vulnerability does not require user interaction and can be exploited remotely with low attack complexity. While it impacts confidentiality by exposing sensitive API tokens, it does not affect integrity or availability. No known exploits are currently in the wild. European organizations using IBM DevOps Deploy for automation and integration with LLM services should prioritize patching or mitigating this issue to prevent unauthorized access to API tokens.
Insufficiently Protected Credentials vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1.
Users are encouraged to upgrade to version 1.13.0, the latest release.
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or transmitted credentials. Exploitation of this issue does not require user interaction.
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.