Weak Default Credentials in Vantage6 Open-Source Infrastructure

CVE-2026-54445

What is CVE-2026-54445?

Vantage6, an open-source infrastructure designed for privacy-preserving analysis, has a security concern in versions prior to 5.0.0 due to weak default credentials. These versions come pre-configured with the username 'root' and the password 'root', which poses significant risk as these defaults are widely known. Attackers potentially exploit these weak credentials to gain administrative access. The security flaw allows for unauthorized control if system administrators neglect to change the default password after the initial setup. As a security measure, users are advised to delete the 'root' user account as soon as a new user is established. The issue is resolved in version 5.0.0 and upgrading is strongly recommended for all users.

References