Executive brief
OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.
Affected products
- PyPI openc3
Junglewise Threat Intelligence
CVE-2025-28388: PYSEC-2025-258 - OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.
CVE-2025-28388 · Severity: low · CVSS 3.1 · Published 2025-06-13
Technologies: openc3 (PyPI). Vendors: PyPI.