Authentication Cookie Forgery Vulnerability in Packet-Analysis Component by Vendor

CVE-2026-90451

What is CVE-2026-90451?

A security flaw exists in the packet-analysis component due to the inclusion of a default environment-configuration file that contains a hardcoded secret value for signing authentication cookies. If users deploy this example configuration without executing the necessary setup routine to regenerate the secret, they risk exposing their systems. Attackers familiar with this default configuration can forge authentication cookies, potentially gaining unauthorized access to sensitive functionalities within the component. To mitigate this vulnerability, it is crucial to avoid copying the example configuration file into the active environment and to ensure the secret values are properly generated and secured.

References