p PatchFirst

CVE-2025-28388

CVE-2025-28388

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

CVSS 9.8 · Critical · EPSS 0.6%

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openc3 PyPI

    Versions
    • 0.1.0
    • 5.10.0
    • 5.10.1
    • 5.11.0
    • 5.11.1
    • 5.11.2
    • 5.11.3
    • 5.12.0
    • 5.13.0
    • 5.14.0
    • 5.14.1
    • 5.14.2
    • 5.15.0
    • 5.15.1
    • 5.15.2
    • 5.16.0
    • 5.16.1
    • 5.16.2
    • 5.17.0
    • 5.17.1
    • 5.18.0
    • 5.19.0
    • 5.20.0
    • 5.9.2b0
    • 6.0.0
    Affected ranges
    • ECOSYSTEM: ≤ 6.0.0

    No fix published

Original sources

Check your server →