CVE-2025-28381

ALTO 7.5CVE-2025-28381 · PYSEC-2025-255 · Published 13/06/2025 · updated 17/06/2026

In breve

CVE-2025-28381 è una vulnerabilità ALTO (CVSS 7.5) che riguarda openc3, cosmos (openc3).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.52%, superiore al 44.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
openc3 PyPI	`≤ 6.0.0`	No fix yet
cosmos openc3	`= 6.0.0`	No fix yet

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

NVD description

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

≤ 6.0.0

No fix yet

= 6.0.0

No fix yet

Description

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

NVD description

A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.

Altre vulnerabilità di openc3

Vedi tutto →