Executive brief
A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers.
Affected products
- PyPI openc3
Junglewise Threat Intelligence
CVE-2025-28381: PYSEC-2025-255 - A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all conta
CVE-2025-28381 · Severity: low · CVSS 3.1 · Published 2025-06-13
Technologies: openc3 (PyPI). Vendors: PyPI.